Lucene search
Redhat.comRH:CVE-2024-29039HistoryMay 01, 2024 - 1:59 a.m.
CVE-2024-29039
2024-05-0101:59:20
redhat.com
access.redhat.com
8
cve-2024-29039
security vulnerability
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
9.1%
A flaw was found in tpm2-tools. The PCR selection, which is passed with the --pcr parameter, is not compared with the attest, making it possible for an attacker to fake a valid attestation.
Related
cvelist
cvelist
nessus
nessus
CBL Mariner 2.0 Security Update: tpm2-tools (CVE-2024-29039)
2024-07-20 00:00:00
Photon OS 3.0: Tpm2 PHSA-2024-3.0-0776
2024-08-08 00:00:00
Photon OS 5.0: Tpm2 PHSA-2024-5.0-0339
2024-08-06 00:00:00
osv
osv
UBUNTU-CVE-2024-29039
2024-06-28 16:15:00
CVE-2024-29039
2024-06-28 16:15:03
tpm2.0-tools-5.7-1.1 on GA media
2024-06-15 00:00:00
vulnrichment
vulnrichment
cbl_mariner
cbl_mariner
CVE-2024-29039 affecting package tpm2-tools for versions less than 4.3.2-2
2024-07-18 16:30:05
CVE-2024-29039 affecting package tpm2-tools for versions less than 5.5.1-1
2024-10-01 09:12:04
cve
cve
CVE-2024-29039
2024-06-28 16:15:03
nvd
nvd
CVE-2024-29039
2024-06-28 16:15:03
ubuntucve
ubuntucve
CVE-2024-29039
2024-06-28 00:00:00
redos
redos
ROS-20240708-02
2024-07-08 00:00:00
debiancve
debiancve
CVE-2024-29039
2024-06-28 16:15:03
photon
photon
Critical Photon OS Security Update - PHSA-2024-3.0-0776
2024-08-02 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0339
2024-08-02 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0664
2024-08-05 00:00:00
mageia
mageia
Updated tpm2-tools packages fixes security vulnerabilities
2024-05-09 05:40:29
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0170)
2024-05-09 00:00:00
openSUSE: Security Advisory for tpm2.0 (SUSE-SU-2024:1636-1)
2024-05-24 00:00:00
Fedora: Security Advisory (FEDORA-2024-4512dc54af)
2024-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: tpm2-tools-5.5.1-1.fc38
2024-05-14 01:33:17
[SECURITY] Fedora 39 Update: tpm2-tools-5.5.1-1.fc39
2024-05-14 03:28:24
[SECURITY] Fedora 38 Update: tpm2-tss-4.0.2-1.fc38
2024-05-14 01:33:17
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
9.1%
Related for RH:CVE-2024-29039