tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9424 advisory.

    - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
    - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9424 advisory.

    The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module     (TPM) 2.0 devices from user space.

    Security Fix(es):

    * tpm2-tools:  arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038)

    * tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the tpm2 package has been released.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-693 advisory.

    tpm2-tools:  arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038)

    tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tpm2-tools installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29039 advisory.

  - tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows     attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file.
    As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture     of the TPM state. This issue has been patched in version 5.7. (CVE-2024-29039)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1636-1 advisory.

  - tpm2-tss:      Fixed CVE-2024-29040  tpm2-tools:      Fixed CVE-2024-29038     Fixed CVE-2024-29039     (CVE-2024-29038, CVE-2024-29039)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-4512dc54af advisory.

    tpm2-tss:

        Fixed CVE-2024-29040

    tpm2-tools:

        Fixed CVE-2024-29038         Fixed CVE-2024-29039


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-3265d70b61 advisory.

    tpm2-tss:

        Fixed CVE-2024-29040

    tpm2-tools:

        Fixed CVE-2024-29038         Fixed CVE-2024-29039


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-0c9d3b51d4 advisory.

    tpm2-tss:

        Fixed CVE-2024-29040

    tpm2-tools:

        Fixed CVE-2024-29038         Fixed CVE-2024-29039


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211559	Oracle Linux 9 : tpm2-tools (ELSA-2024-9424)	Nessus	Oracle Linux Local Security Checks	critical
210806	RHEL 9 : tpm2-tools (RHSA-2024:9424)	Nessus	Red Hat Local Security Checks	critical
205174	Photon OS 3.0: Tpm2 PHSA-2024-3.0-0776	Nessus	PhotonOS Local Security Checks	critical
205173	Photon OS 4.0: Tpm2 PHSA-2024-4.0-0664	Nessus	PhotonOS Local Security Checks	critical
205097	Amazon Linux 2023 : tpm2-tools (ALAS2023-2024-693)	Nessus	Amazon Linux Local Security Checks	critical
204991	Photon OS 5.0: Tpm2 PHSA-2024-5.0-0339	Nessus	PhotonOS Local Security Checks	critical
202736	CBL Mariner 2.0 Security Update: tpm2-tools (CVE-2024-29039)	Nessus	MarinerOS Local Security Checks	critical
197054	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tpm2.0-tools (SUSE-SU-2024:1636-1)	Nessus	SuSE Local Security Checks	critical
196938	Fedora 39 : tpm2-tools / tpm2-tss (2024-4512dc54af)	Nessus	Fedora Local Security Checks	critical
196935	Fedora 38 : tpm2-tools / tpm2-tss (2024-3265d70b61)	Nessus	Fedora Local Security Checks	critical
194901	Fedora 40 : tpm2-tools / tpm2-tss (2024-0c9d3b51d4)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2024-29039

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical