Msrc Cbl2 Tpm2-Tools 4.3.2-2 On Cbl Mariner 2.0 vulnerabilities
2 known vulnerabilities affecting msrc/cbl2_tpm2-tools_4.3.2-2_on_cbl_mariner_2.0.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-29039CRITICALCVSS 9.02024-06-11
CVE-2024-29039 [CRITICAL] CWE-807 Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state
Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secur
msrc
CVE-2024-29038MEDIUMCVSS 4.32024-06-11
CVE-2024-29038 [MEDIUM] CWE-1283 tpm2 does not detect if quote was not generated by TPM
tpm2 does not detect if quote was not generated by TPM
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which
msrc