Lucene search

K
redhatcveRedhat.comRH:CVE-2024-29040
HistoryMay 01, 2024 - 7:28 a.m.

CVE-2024-29040

2024-05-0107:28:52
redhat.com
access.redhat.com
11
tpm2
fapi_verifyquote
flaw detection

6.8 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.

6.8 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%