tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-tpm2-tools | Nov 19, 2024 | Jun 28, 2024 | |
| Alpine Linux | alpine-linux-upgrade-tpm2-tools | Aug 8, 2025 | Jun 28, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-tpm2-toolsamazon-linux-2023-upgrade-tpm2-tools-debuginfoamazon-linux-2023-upgrade-tpm2-tools-debugsource | Feb 17, 2025 | Apr 30, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jun 28, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-tpm2-tools | Nov 21, 2024 | Apr 30, 2024 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-tpm2-toolsredhat-upgrade-tpm2-tools-debuginforedhat-upgrade-tpm2-tools-debugsource | Nov 13, 2024 | Jun 28, 2024 | |
| Rocky_linux | rocky-upgrade-tpm2-toolsrocky-upgrade-tpm2-tools-debuginforocky-upgrade-tpm2-tools-debugsource | Mar 18, 2025 | Jun 28, 2024 | |
| Suse | — | suse-upgrade-tpm2-0-tools | May 15, 2024 | May 14, 2024 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Jun 28, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub