Known vulnerabilities in tpm2-tools
Vendor:
Linux TPM2 & TSS2 Software
Software:
tpm2-tools
Software CPE:
cpe:2.3:a:tpm2-software:tpm2-tools:*:*:*:*:*:*:*:*
Website:
https://github.com/tpm2-software/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.3
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96646 - Mutable Attestation or Measurement Reporting Data CVE-2024-29038 |
CWE-1283 | Low | 5.5.1, 5.6.1, 5.7 | 30.08.2024 |
SB2024083054 SB2024083055 SB2024083057 and 6 more |
||
| #VU96645 - Reliance on Untrusted Inputs in a Security Decision CVE-2024-29039 |
CWE-807 | Low | 5.5.1, 5.6.1, 5.7 | 30.08.2024 |
SB2024083054 SB2024083055 SB2024083057 and 7 more |
||
| #VU54287 - Use of Hard-coded Cryptographic Key CVE-2021-3565 |
CWE-321 | Low | 4.3.2, 5.1.1 | 21.06.2021 |
SB2021062108 SB2021062207 SB2021111138 and 5 more |