Skip to content
OpenAdvisories

Vendor

tpm2-software

4 known vulnerabilities.

Products

tpm2-tools 2 tpm2-tss 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-29040

    Fapi Verify Quote: Does not detect if quote was not generated by TPM

    This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERAT…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2024-29038

    tpm2 does not detect if quote was not generated by TPM

    tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

    tpm2-software tpm2-tools tpm2-tools tpm2-tools Debian Ubuntu Alpine
  • Medium 6.4
    CVE-2023-22745

    Buffer Overlow in TSS2_RC_Decode in tpm2-tss

    tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `lay…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu