Skip to content
OpenAdvisories

Package · Debian

tpm2-tss

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-29040

    Fapi Verify Quote: Does not detect if quote was not generated by TPM

    This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERAT…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Azure Linux Alpine
  • Medium 6.4
    CVE-2023-22745

    Buffer Overlow in TSS2_RC_Decode in tpm2-tss

    tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `lay…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Azure Linux