CVE-2024-29038 — tpm2 does not detect if quote was not generated by TPM
tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkqu…
Published: 2024-06-28 · CVSS: 4.3 · CVSS 3.1
tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7