tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tpm2-tools | Nov 19, 2024 | Jun 28, 2024 |
| Alpine Linux | — | Upgrade tpm2-tools | Aug 8, 2025 | Jun 28, 2024 |
| Amazon_linux_2023 | — | Upgrade tpm2-tools-debugsourceUpgrade tpm2-toolsUpgrade tpm2-tools-debuginfo | Feb 17, 2025 | Apr 30, 2024 |
| Debian | — | Upgrade tpm2-toolsNo solution exists | May 15, 2025 | Jun 28, 2024 |
| Oracle_linux | — | Upgrade tpm2-tools | Nov 21, 2024 | Apr 30, 2024 |
| Redhat_linux | — | Upgrade tpm2-tools-debuginfoUpgrade tpm2-toolsUpgrade tpm2-tools-debugsourceNo solution exists | Nov 13, 2024 | Jun 28, 2024 |
| Rocky_linux | — | Upgrade tpm2-tools-debugsourceUpgrade tpm2-toolsUpgrade tpm2-tools-debuginfo | Mar 18, 2025 | Jun 28, 2024 |
| Suse | — | Upgrade tpm2.0-tools | May 15, 2024 | May 14, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub