Insufficient verification of data authenticity in tpm2-tss - CVE-2024-29040

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU89838

Insufficient verification of data authenticity in tpm2-tss - CVE-2024-29040

Published: May 28, 2024


Vulnerability identifier: #VU89838
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-29040
CWE-ID: CWE-345
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to missing checks for the magic number. A local user can generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.


Affected software

tpm2-tss
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
openSUSE Leap Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Anolis OS
Fedora
libtss2-esys0 (Ubuntu package)
libtss2-tctildr0
tpm2-0-tss-devel
tpm2-0-tss
libtss2-rc0
libtss2-rc0-debuginfo
libtss2-esys0-debuginfo
libtss2-tcti-mssim0
libtss2-tcti-device0
libtss2-mu0-debuginfo
libtss2-tcti-mssim0-debuginfo
libtss2-fapi0
libtss2-tctildr0-debuginfo
libtss2-mu0
libtss2-tcti-device0-32bit
libtss2-esys0-32bit
libtss2-tcti-mssim0-32bit
libtss2-tcti-mssim0-32bit-debuginfo
libtss2-sys0-32bit
libtss2-sys0-32bit-debuginfo
libtss2-mu0-32bit
libtss2-esys0-32bit-debuginfo
libtss2-sys0-debuginfo
libtss2-sys0-64bit
libtss2-tcti-device0-64bit
libtss2-tcti-mssim0-64bit
libtss2-sys0-64bit-debuginfo
libtss2-tcti-mssim0-64bit-debuginfo
libtss2-mu0-64bit
libtss2-esys0-64bit-debuginfo
libtss2-mu0-64bit-debuginfo
libtss2-esys0-64bit
libtss2-tcti-device0-64bit-debuginfo
libtss2-tcti-device0-32bit-debuginfo
libtss2-mu0-32bit-debuginfo
libtss2-sys0
libtss2-esys0
libtss2-tcti-device0-debuginfo
tpm2-0-tss-debugsource
libtss2-fapi0-debuginfo
tpm2-tss-debuginfo
tpm2-tss
tpm2-tss-debugsource
tpm2-tss-devel
tpm2-tss-help
libtss2-tcti-swtpm0-64bit-debuginfo
libtss2-tctildr0-32bit-debuginfo
libtss2-rc0-64bit-debuginfo
libtss2-tctildr0-32bit
libtss2-sys1-32bit-debuginfo
libtss2-tcti-cmd0-32bit-debuginfo
libtss2-tcti-cmd0-32bit
libtss2-fapi1-32bit-debuginfo
libtss2-tcti-cmd0-64bit-debuginfo
libtss2-tctildr0-64bit-debuginfo
libtss2-fapi1-64bit-debuginfo
libtss2-tctildr0-64bit
libtss2-tcti-cmd0-64bit
libtss2-tcti-swtpm0-64bit
libtss2-fapi1-64bit
libtss2-rc0-64bit
libtss2-sys1-64bit-debuginfo
libtss2-sys1-64bit
libtss2-tcti-swtpm0
libtss2-tcti-pcap0
libtss2-tcti-cmd0
libtss2-tcti-swtpm0-32bit-debuginfo
libtss2-tcti-swtpm0-debuginfo
libtss2-tcti-swtpm0-32bit
libtss2-sys1-debuginfo
libtss2-fapi1-debuginfo
libtss2-fapi1-32bit
libtss2-rc0-32bit-debuginfo
libtss2-sys1-32bit
libtss2-rc0-32bit
libtss2-tcti-pcap0-debuginfo
libtss2-fapi1
libtss2-sys1
libtss2-tcti-cmd0-debuginfo
libtss2-tcti-cmd0 (Ubuntu package)
libtss2-sys1 (Ubuntu package)
libtss2-rc0 (Ubuntu package)
libtss2-mu0 (Ubuntu package)
libtss2-fapi1 (Ubuntu package)
libtss2-tcti-swtpm0 (Ubuntu package)
libtss2-esys-3.0.2-0 (Ubuntu package)
libtss2-tcti-device0 (Ubuntu package)
libtss2-tcti-mssim0 (Ubuntu package)
libtss2-tctildr0 (Ubuntu package)
libtss2-tcti-pcap0 (Ubuntu package)
libtss2-policy0 (Ubuntu package)
libtss2-tcti-spi-helper0 (Ubuntu package)
libtss2-tcti-libtpms0 (Ubuntu package)
tpm2-tss-doc
libtss2-policy0t64 (Ubuntu package)
libtss2-esys-3.0.2-0t64 (Ubuntu package)
libtss2-fapi1t64 (Ubuntu package)
libtss2-mu-4.0.1-0t64 (Ubuntu package)
libtss2-tctildr0t64 (Ubuntu package)
libtss2-rc0t64 (Ubuntu package)
libtss2-sys1t64 (Ubuntu package)
libtss2-tcti-cmd0t64 (Ubuntu package)
libtss2-tcti-device0t64 (Ubuntu package)
libtss2-tcti-libtpms0t64 (Ubuntu package)
libtss2-tcti-mssim0t64 (Ubuntu package)
libtss2-tcti-pcap0t64 (Ubuntu package)
libtss2-tcti-spi-helper0t64 (Ubuntu package)
libtss2-tcti-swtpm0t64 (Ubuntu package)
tpm2-tools

How to mitigate CVE-2024-29040

Install updates from vendor's website.

tpm2-tss - addressed in versions 4.0.2, 4.1.0
libtss2-esys0 (Ubuntu package) - update to 2.3.2-1ubuntu0.20.04.2
libtss2-tctildr0 - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
tpm2-0-tss-devel - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
tpm2-0-tss - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-rc0 - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-rc0-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-esys0-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-mssim0 - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-device0 - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-mu0-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-mssim0-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-fapi0 - update to 2.4.5-150300.3.9.1
libtss2-tctildr0-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-mu0 - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-device0-32bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-esys0-32bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-mssim0-32bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-mssim0-32bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-sys0-32bit - update to 2.4.5-150300.3.9.1
libtss2-sys0-32bit-debuginfo - update to 2.4.5-150300.3.9.1
libtss2-mu0-32bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-esys0-32bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-sys0-debuginfo - update to 2.4.5-150300.3.9.1
libtss2-sys0-64bit - update to 2.4.5-150300.3.9.1
libtss2-tcti-device0-64bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-mssim0-64bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-sys0-64bit-debuginfo - update to 2.4.5-150300.3.9.1
libtss2-tcti-mssim0-64bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-mu0-64bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-esys0-64bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-mu0-64bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-esys0-64bit - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-device0-64bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-device0-32bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-mu0-32bit-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-sys0 - update to 2.4.5-150300.3.9.1
libtss2-esys0 - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-tcti-device0-debuginfo - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
tpm2-0-tss-debugsource - addressed in versions 2.4.5-150300.3.9.1, 3.1.0-150400.3.6.1
libtss2-fapi0-debuginfo - update to 2.4.5-150300.3.9.1
tpm2-tss-debuginfo - addressed in versions 3.0.3-3, 3.1.0-5
tpm2-tss - addressed in versions 3.0.3-3, 3.1.0-5
tpm2-tss-debugsource - addressed in versions 3.0.3-3, 3.1.0-5
tpm2-tss-devel - addressed in versions 3.0.3-3, 3.1.0-5
tpm2-tss-help - addressed in versions 3.0.3-3, 3.1.0-5
libtss2-tcti-swtpm0-64bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tctildr0-32bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-rc0-64bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tctildr0-32bit - update to 3.1.0-150400.3.6.1
libtss2-sys1-32bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0-32bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0-32bit - update to 3.1.0-150400.3.6.1
libtss2-fapi1-32bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0-64bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tctildr0-64bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-fapi1-64bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tctildr0-64bit - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0-64bit - update to 3.1.0-150400.3.6.1
libtss2-tcti-swtpm0-64bit - update to 3.1.0-150400.3.6.1
libtss2-fapi1-64bit - update to 3.1.0-150400.3.6.1
libtss2-rc0-64bit - update to 3.1.0-150400.3.6.1
libtss2-sys1-64bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-sys1-64bit - update to 3.1.0-150400.3.6.1
libtss2-tcti-swtpm0 - update to 3.1.0-150400.3.6.1
libtss2-tcti-pcap0 - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0 - update to 3.1.0-150400.3.6.1
libtss2-tcti-swtpm0-32bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tcti-swtpm0-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tcti-swtpm0-32bit - update to 3.1.0-150400.3.6.1
libtss2-sys1-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-fapi1-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-fapi1-32bit - update to 3.1.0-150400.3.6.1
libtss2-rc0-32bit-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-sys1-32bit - update to 3.1.0-150400.3.6.1
libtss2-rc0-32bit - update to 3.1.0-150400.3.6.1
libtss2-tcti-pcap0-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-fapi1 - update to 3.1.0-150400.3.6.1
libtss2-sys1 - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0-debuginfo - update to 3.1.0-150400.3.6.1
libtss2-tcti-cmd0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-sys1 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-rc0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-mu0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-fapi1 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-tcti-swtpm0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-esys-3.0.2-0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-tcti-device0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-tcti-mssim0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-tctildr0 (Ubuntu package) - addressed in versions 3.2.0-1ubuntu1.1, 4.0.1-3ubuntu1.1
libtss2-tcti-pcap0 (Ubuntu package) - update to 4.0.1-3ubuntu1.1
libtss2-policy0 (Ubuntu package) - update to 4.0.1-3ubuntu1.1
libtss2-tcti-spi-helper0 (Ubuntu package) - update to 4.0.1-3ubuntu1.1
libtss2-tcti-libtpms0 (Ubuntu package) - update to 4.0.1-3ubuntu1.1
tpm2-tss-doc - update to 4.0.1-5
tpm2-tss - update to 4.0.1-5
tpm2-tss-devel - update to 4.0.1-5
libtss2-policy0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-esys-3.0.2-0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-fapi1t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-mu-4.0.1-0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tctildr0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-rc0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-sys1t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-cmd0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-device0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-libtpms0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-mssim0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-pcap0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-spi-helper0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
libtss2-tcti-swtpm0t64 (Ubuntu package) - update to 4.0.1-7.1ubuntu5.1
tpm2-tss - addressed in versions 4.0.2-1.fc38, 4.0.2-1.fc39, 4.1.0-1.fc40
tpm2-tools - addressed in versions 5.5.1-1.fc38, 5.5.1-1.fc39, 5.7-1.fc40

External References

Related Security Bulletins