vulnerability

Ubuntu: USN-6796-1 (CVE-2024-29040): TPM2 Software Stack vulnerabilities

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
05/29/2024
Added
06/06/2024
Modified
02/20/2025

Description

This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn't, or can use services it shouldn't be able to. This
issue has been patched in version 4.1.0.

Solution(s)

ubuntu-upgrade-libtss2-esys-3-0-2-0ubuntu-upgrade-libtss2-esys-3-0-2-0t64ubuntu-upgrade-libtss2-esys0ubuntu-upgrade-libtss2-fapi1ubuntu-upgrade-libtss2-fapi1t64ubuntu-upgrade-libtss2-mu-4-0-1-0t64ubuntu-upgrade-libtss2-mu0ubuntu-upgrade-libtss2-policy0ubuntu-upgrade-libtss2-policy0t64ubuntu-upgrade-libtss2-rc0ubuntu-upgrade-libtss2-rc0t64ubuntu-upgrade-libtss2-sys1ubuntu-upgrade-libtss2-sys1t64ubuntu-upgrade-libtss2-tcti-cmd0ubuntu-upgrade-libtss2-tcti-cmd0t64ubuntu-upgrade-libtss2-tcti-device0ubuntu-upgrade-libtss2-tcti-device0t64ubuntu-upgrade-libtss2-tcti-libtpms0ubuntu-upgrade-libtss2-tcti-libtpms0t64ubuntu-upgrade-libtss2-tcti-mssim0ubuntu-upgrade-libtss2-tcti-mssim0t64ubuntu-upgrade-libtss2-tcti-pcap0ubuntu-upgrade-libtss2-tcti-pcap0t64ubuntu-upgrade-libtss2-tcti-spi-helper0ubuntu-upgrade-libtss2-tcti-spi-helper0t64ubuntu-upgrade-libtss2-tcti-swtpm0ubuntu-upgrade-libtss2-tcti-swtpm0t64ubuntu-upgrade-libtss2-tctildr0ubuntu-upgrade-libtss2-tctildr0t64

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today