CVE-2024-29040: Fapi Verify Quote: Does not detect if quote was not generated by TPM
Last updated 24 July 2024
Other sources
This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn't, or can use services it shouldn't be able to. This issue has been patched in version 4.1.0.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29040?
CVE-2024-29040 has been classified as a moderate severity vulnerability.
How do I fix CVE-2024-29040?
To fix CVE-2024-29040, you need to upgrade to the version 4.1.3-1 or later of the tpm2-tss package.
Which software versions are affected by CVE-2024-29040?
CVE-2024-29040 affects tpm2-tss versions up to and including 4.0.1-7.2.
What systems are impacted by CVE-2024-29040?
CVE-2024-29040 impacts systems that run the tpm2-tss package on Debian.
What component is vulnerable in CVE-2024-29040?
The vulnerability in CVE-2024-29040 is found in the deserialization process of the JSON Quote Info returned by the Fapi_Quote function.