CVE-2024-29040
libtss2-esys-3.0.2-0t64: This repository hosts source code implementing the Trusted ComputingGroup's (TCG) TPM2 Software Stack (TSS)
CVE-2024-29040 is fixed in 35 products on 1 platform, first by libtss2-esys-3.0.2-0 3.2.0-1ubuntu1.1, released April 29, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
4.3
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0033
26th percentile
This repository hosts source code implementing the Trusted ComputingGroup's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned byFapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure`TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure anynumber can be used in the JSON structure. The verifier can receive a statewhich does not represent the actual, possibly malicious state of the deviceunder test. The malicious device might get access to data it shouldn't, orcan use services it shouldn't be able to. Thisissue has been patched in version 4.1.0.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libtss2-esys-3.0.2-0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-esys-3.0.2-0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-esys-3.0.2-0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-esys-3.0.2-0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-esys-3.0.2-0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-esys-3.0.2-0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-esys-3.0.2-0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-esys-3.0.2-0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-fapi1 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-fapi1 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-fapi1t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-fapi1t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-fapi1t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-fapi1t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-fapi1t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-fapi1t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-mu-4.0.1-0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-mu-4.0.1-0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-mu-4.0.1-0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-mu-4.0.1-0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-mu-4.0.1-0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-mu-4.0.1-0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-mu0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-mu0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-policy0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-policy0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-policy0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-policy0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-policy0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-policy0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-rc0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-rc0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-rc0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-rc0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-rc0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-rc0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-rc0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-rc0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-sys1 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-sys1 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-sys1t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-sys1t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-sys1t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-sys1t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-sys1t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-sys1t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-cmd0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-tcti-cmd0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-tcti-cmd0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-cmd0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-cmd0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tcti-cmd0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-cmd0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-cmd0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-device0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-tcti-device0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-tcti-device0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-device0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-i2c-ftdi0 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-i2c-ftdi0 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-i2c-helper0 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-i2c-helper0 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-libtpms0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-libtpms0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-libtpms0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tcti-libtpms0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-libtpms0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-libtpms0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-mssim0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-tcti-mssim0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-tcti-mssim0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-mssim0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-mssim0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tcti-mssim0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-mssim0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-mssim0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-pcap0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-pcap0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-pcap0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tcti-pcap0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-pcap0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-pcap0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-spi-ftdi0 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-spi-ftdi0 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-spi-helper0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-spi-helper0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-spi-helper0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tcti-spi-helper0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-spi-helper0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-spi-helper0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-spi-ltt2go0 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-spi-ltt2go0 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-spidev0 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-spidev0 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-swtpm0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-tcti-swtpm0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-tcti-swtpm0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tcti-swtpm0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tcti-swtpm0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tcti-swtpm0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tcti-swtpm0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tcti-swtpm0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tctildr0 · Ubuntu 22.04.1 LTS (jammy) | 3.2.0-1ubuntu1.1 | libtss2-tctildr0 3.2.0-1ubuntu1.1 | Apr 29, 2024 |
| libtss2-tctildr0t64 · Ubuntu 24.04.5 LTS (noble) | 4.0.1-7.1ubuntu5.1 | libtss2-tctildr0t64 4.0.1-7.1ubuntu5.1 | Apr 29, 2024 |
| libtss2-tctildr0t64 · Ubuntu 24.10 (oracular) | 4.1.0-1ubuntu1 | libtss2-tctildr0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| libtss2-tctildr0t64 · Ubuntu 25.04 (plucky) | 4.1.0-1ubuntu1 | libtss2-tctildr0t64 4.1.0-1ubuntu1 | Apr 30, 2024 |
| tpm2-tss · Debian 13.5 (trixie) | 4.1.0-1 | DEBIAN-CVE-2024-29040 | Jun 28, 2024 |
| tpm2-tss · Debian 14 | 4.1.0-1 | DEBIAN-CVE-2024-29040 | Jun 28, 2024 |
| tpm2-tss · amzn 2023 | 4.0.2-1.amzn2023 | ALAS2023-2024-703 | Aug 14, 2024 |
| tpm2-tss-debuginfo · amzn 2023 | 4.0.2-1.amzn2023 | ALAS2023-2024-703 | Aug 14, 2024 |
| tpm2-tss-debugsource · amzn 2023 | 4.0.2-1.amzn2023 | ALAS2023-2024-703 | Aug 14, 2024 |
| tpm2-tss-devel · amzn 2023 | 4.0.2-1.amzn2023 | ALAS2023-2024-703 | Aug 14, 2024 |
| tpm2-tss-fapi · amzn 2023 | 4.0.2-1.amzn2023 | ALAS2023-2024-703 | Aug 14, 2024 |
| tpm2-tss-fapi-debuginfo · amzn 2023 | 4.0.2-1.amzn2023 | ALAS2023-2024-703 | Aug 14, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.