CVE-2021-3505

medium
Published — · Modified —
CVSS v3
CVSS v2
VIR risk
5.5

Description

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate(), which is called before the prime number check. The highest threat from this vulnerability is to data confidentiality.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2021-3505

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2021-3505.html

OS impact

OSVersionStatusFixed in
arch archfixed0.8.0-1
suse slesaffected
debian debianbookwormfixed0.8.0~dev1-1
debian debianforkyfixed0.8.0~dev1-1
debian debiansidfixed0.8.0~dev1-1
debian debiantrixiefixed0.8.0~dev1-1

References

Verify integrity in audit chain (admin only). AS-IS.