tpm2-tools project vulnerabilities

Products

• tpm2-tools 3
• tpm2.0-tools 1

Latest tpm2-tools project CVEs

Newest publication first

1. CVE-2024-29039 Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state

   Published 2024-06-28

   High·CVSS 8.1 EPSS 0.98%

   tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots and ban...

2. CVE-2024-29038 tpm2 does not detect if quote was not generated by TPM

   Published 2024-06-28

   Low·CVSS 3.3 EPSS 0.37%

   tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by tpm2 checkquote. This issue was patched in version 5.7.

3. CVE-2021-3565 A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and r...

   Published 2021-06-04

   Medium·CVSS 5.9 EPSS 1.3%

   A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to d...

4. CVE-2017-7524 tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

   Published 2017-06-27

   High·CVSS 7.5 EPSS 1.2%

   tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.