Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-29038

Опубликовано: 28 июн. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 4.3

Описание

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by tpm2 checkquote. This issue was patched in version 5.7.

РелизСтатусПримечание
devel

needed

esm-apps/bionic

not-affected

code not present
esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

esm-apps/xenial

not-affected

code not present
focal

ignored

end of standard support, was needed
jammy

needed

mantic

ignored

end of life, was needed
noble

needed

Показывать по

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.4
redhat
почти 2 года назад

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

CVSS3: 4.3
nvd
почти 2 года назад

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

CVSS3: 4.3
msrc
около 2 месяцев назад

tpm2 does not detect if quote was not generated by TPM

CVSS3: 4.3
debian
почти 2 года назад

tpm2-tools is the source repository for the Trusted Platform Module (T ...

CVSS3: 3.3
fstec
9 месяцев назад

Уязвимость компонента tpm2 checkquote репозитория для инструментов Trusted Platform Module tpm2-tools, позволяющая нарушителю получить доступ к защищаемой информации

4.3 Medium

CVSS3