Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-29038
HistoryJun 28, 2024 - 12:00 a.m.

CVE-2024-29038

2024-06-2800:00:00
ubuntu.com
ubuntu.com
7
cve-2024-29038
vulnerability
unix os

CVSS3

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.1%

tpm2-tools is the source repository for the Trusted Platform Module
(TPM2.0) tools. A malicious attacker can generate arbitrary quote data
which is not detected by tpm2 checkquote. This issue was patched in
version 5.7.

CVSS3

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.1%