CVE:CVE-2021-3746
CNNVD:CNNVD-202109-728
Archlinux libtpms是 Archlinux开源的一个应用程序。提供可信任平台模块（TPM 1.2和TPM 2.0）的软件仿真的库。
libtpms 存在缓冲区错误漏洞，该漏洞源于libtpms中存在越界访问的问题，攻击者可以通过构建特殊的TPM 2命令包进行越界访问敏感数据甚至进行拒绝服务攻击。
solution:Upgrade libtpms_project libtpms to a higher version than 0.6.6,0.7.9,0.8.5,and avoid the version [0.6.0,0.6.6),[0.7.0,0.7.9),[0.8.0,0.8.5); Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0