Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 1.0%	CVE-2024-29039tpm2-tools · Reliance on Untrusted Inputs in a Security Decision Critical9.1EPSS 1.0%2024-06-28CVE Database V5CVE-2024-29039 tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7. EPSS 1.0%Vulnerability tpm2-software #cwe-807	CVE Database V5	2024-06-28
Medium	4.3	EPSS 0.4%	CVE-2024-29038tpm2-tools · Mutable Attestation or Measurement Reporting Data Medium4.3EPSS 0.4%2024-06-28CVE Database V5CVE-2024-29038 tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7. EPSS 0.4%Vulnerability tpm2-software #cwe-1283 #cwe-1390	CVE Database V5	2024-06-28

Page 1 of 1