CVE-2024-29038

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-1283 CWE-1390

Affected software

Vendor	Product	Versions
tpm2-software	tpm2-tools	>= 4.1-rc0, < 5.7

References

Timeline

Published: Jun 28, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-290398.1tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkqu CVE-2024-29048.8Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33.CVE-2024-290404.3This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned b CVE-2024-290416.1Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are CVE-2024-290425.3Translate is a package that allows users to convert text to different languages on Node.js and the browser. Prior to version 3.0.0, an attac CVE-2024-290438.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-290448.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-290457.5Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-290468.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-290478.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-290488.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-290494.7Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability