CVE-2024-29038
tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by tpm2 checkquote. This issue was patched in version 5.7.
| Software | From | Fixed in |
|---|---|---|
| tpm2-tools_project / tpm2-tools | 4.1 | 5.5.1 |
| tpm2-tools_project / tpm2-tools | 5.6.1.x | 5.7 |
- https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7
- https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-5495-c38w-gr6f
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFR7SVEWCOXORHPCLLGXEMHFMIGG2MFE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GI4JFEZBKQQUPJ4RWK6IHEWXAFCEJDPI/
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime