Vulnerability Details CVE-2024-29039
tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.2%
CVSS Severity
CVSS v3 Score 9.0
Products affected by CVE-2024-29039
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:-
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:1.1.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.0.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.1.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.1.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.1.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.3
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.4
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.5
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.3
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.4
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.2.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.2.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.2.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.0.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1.3
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.2.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.3.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.3.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.3.2
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:5.0
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:5.1
-
cpe:2.3:a:tpm2-tools_project:tpm2-tools:5.1.1