1 matches found
tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote
A flaw was found in the tpm2-tools package. This issue occurs due to a missing check whether the magic number in attest is equal to TPM2GENERATEDVALUE, which can allow an attacker to generate arbitrary quote data that may not be detected by tpm2checkquote...
4.3CVSS5.8AI score0.0037EPSS
SaveExploits1References4
20