CVE-2024-29038: tpm2 does not detect if quote was not generated by TPM
It was not checked whether the magic number in the attest is equal to TPM2GENERATEDVALUE. So an attacker could generate arbitrary quote data which was not detected by tpm2 checkquote.
References: https://github.com/tpm2-software/tpm2-tools/commit/66d922d6547b7b4fe4f274fb2ec10b376e0e259c
Other sources
tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by tpm2 checkquote. This issue was patched in version 5.7.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29038?
CVE-2024-29038 has a high severity due to the potential for attackers to generate arbitrary quote data unchecked by tpm2 checkquote.
How do I fix CVE-2024-29038?
To fix CVE-2024-29038, you should upgrade to tpm2-tools version 5.7 or later.
What does CVE-2024-29038 affect?
CVE-2024-29038 affects the tpm2-tools package provided by Red Hat.
What could an attacker achieve by exploiting CVE-2024-29038?
An attacker could exploit CVE-2024-29038 to generate arbitrary quote data that bypasses detection mechanisms.
Is CVE-2024-29038 related to TPM security?
Yes, CVE-2024-29038 is directly related to security issues in the Trusted Platform Module (TPM) implementations.