PatchTheCVEtpm2-tools vulnerabilities and fixes
Recent CVEs affecting tpm2-tools, with upgrade or downgrade steps. 2 tracked.
Also searched as: tpm2 tools.
tpm2-tools has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-06-28. Highest priority: CVE-2024-29039 (score 57/100).
- CVE-2024-29039 CRITICAL 9.0 UPGRADE tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools
- CVE-2024-29038 MEDIUM 4.3 UPGRADE tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools
FAQ
How do I fix tpm2-tools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tpm2-tools being exploited right now?
None of the tracked tpm2-tools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tpm2-tools CVE should I patch first?
CVE-2024-29039 currently ranks highest (57/100): tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools.