https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:40:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04481 bdu:2024-04481 https://cve.radiocsirt.org/vuln/bdu:2024-04481 https://cve.radiocsirt.org/vuln/bell-cve-2024-29040 <p><strong>Affected:</strong> Alpaquita:23: tpm2-tss, Alpaquita:stream: tpm2-tss</p> <p><strong>Affected:</strong> Alpaquita:23: tpm2-tss, Alpaquita:stream: tpm2-tss</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-29040 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-259040 EUVD-2026-259040 https://cve.radiocsirt.org/vuln/euvd-2026-259040 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29040 <p>This repository hosts source code implementing the Trusted Computing Group&#39;s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn&#39;t, or can use services it shouldn&#39;t be able to. This issue has been patched in version 4.1.0.</p> <p>This repository hosts source code implementing the Trusted Computing Group&#39;s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn&#39;t, or can use services it shouldn&#39;t be able to. This issue has been patched in version 4.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29040 https://cve.radiocsirt.org/vuln/gsd-2024-29040 gsd-2024-29040 https://cve.radiocsirt.org/vuln/gsd-2024-29040 https://cve.radiocsirt.org/vuln/msrc_cve-2024-29040 msrc_CVE-2024-29040 https://cve.radiocsirt.org/vuln/msrc_cve-2024-29040 https://cve.radiocsirt.org/vuln/oesa-2024-1613 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: tpm2-tss, openEuler:22.03-LTS: tpm2-tss, openEuler:22.03-LTS-SP2: tpm2-tss, openEuler:22.03-LTS-SP3: tpm2-tss</p> <p>tpm2-tss is a software stack supporting Trusted Platform Module(TPM) 2.0 system APIs which provides TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers. Security Fix(es): A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.(CVE-2024-29040)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: tpm2-tss, openEuler:22.03-LTS: tpm2-tss, openEuler:22.03-LTS-SP2: tpm2-tss, openEuler:22.03-LTS-SP3: tpm2-tss</p> <p>tpm2-tss is a software stack supporting Trusted Platform Module(TPM) 2.0 system APIs which provides TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers. Security Fix(es): A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.(CVE-2024-29040)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1613 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13933-1 <p>libtss2-esys0-32bit-4.1.0-1.1 on GA media</p> <p>libtss2-esys0-32bit-4.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13933-1 https://cve.radiocsirt.org/vuln/suse-su-2024:1635-1 <p>Security update for tpm2-0-tss</p> <p>Security update for tpm2-0-tss</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1635-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29040 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: tpm2-tss, Ubuntu:24.04:LTS: tpm2-tss</p> <p>This repository hosts source code implementing the Trusted Computing Group&#39;s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn&#39;t, or can use services it shouldn&#39;t be able to. This issue has been patched in version 4.1.0.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: tpm2-tss, Ubuntu:24.04:LTS: tpm2-tss</p> <p>This repository hosts source code implementing the Trusted Computing Group&#39;s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn&#39;t, or can use services it shouldn&#39;t be able to. This issue has been patched in version 4.1.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29040 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0778 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0778