{"id":"CVE-2024-29039","summary":"Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state","details":"tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file.  As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7.","aliases":["GHSA-8rjm-5f5f-h4q6"],"modified":"2026-08-12T03:51:26.822836722Z","published":"2024-06-28T15:48:25.623Z","related":["ALSA-2024:9424","SUSE-SU-2024:1636-1","SUSE-SU-2024:1636-2","SUSE-SU-2025:20151-1","openSUSE-SU-2024:13926-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29039.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-807"]},"references":[{"type":"WEB","url":"https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFR7SVEWCOXORHPCLLGXEMHFMIGG2MFE/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GI4JFEZBKQQUPJ4RWK6IHEWXAFCEJDPI/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29039.json"},{"type":"ADVISORY","url":"https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-8rjm-5f5f-h4q6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29039"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tpm2-software/tpm2-tools","events":[{"introduced":"0"},{"fixed":"c6e182cf690ca0022b77fe7d3c174659917a7e7e"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"5.7"}],"source":["AFFECTED_FIELD","CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:tpm2-tools_project:tpm2-tools:*:*:*:*:*:*:*:*"}}],"versions":["5.7-rc1","5.7-rc0","5.4","5.5","5.6","ajay-kish-pub","5.6-rc0","5.5-rc1","5.5-rc0","5.4-rc0","5.3","5.3-rc1","5.3-rc0","5.2","5.2-rc0","5.1","5.1-rc1","5.1-rc0","5.0","5.0-rc0","4.2","4.2-rc1","4.2-RC0","4.1.1-RC1","4.1.1-RC0","4.1","4.1-rc1","4.1-rc0","4.0","4.0-rc2","4.0-rc0","2.0.0","v1.1.0","2.0.0-beta_0","v1.1-beta_1","v1.1-beta_0","v1.0.1","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29039.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"}]}