CVE-2020-24455
CVE-2020-24455 is a medium-severity vulnerability in Tpm2 Software Stack Project Tpm2 Software Stack with a CVSS 3.x base score of 6.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-909.
Key facts
- Severity: Medium (CVSS 3.x base score 6.7)
- CVSS v2: 4.6
- EPSS exploit prediction: 1% (44th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-909
- Affected product: Tpm2 Software Stack Project Tpm2 Software Stack
- Published:
- Last modified:
Description
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.
Frequently asked questions
- What is CVE-2020-24455?
- Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.
- How severe is CVE-2020-24455?
- CVE-2020-24455 has a CVSS 3.x base score of 6.7, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2020-24455 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (44th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2020-24455?
- CVE-2020-24455 primarily affects Tpm2 Software Stack Project Tpm2 Software Stack. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2020-24455?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2020-24455 published?
- CVE-2020-24455 was published on 2021-02-26 and last updated on 2026-06-17.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1902167
- https://github.com/tpm2-software/tpm2-tss/releases/tag/2.4.3
- https://github.com/tpm2-software/tpm2-tss/releases/tag/3.0.1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KPOENCMJU4DMT3BDNUBRK25B3DJ47UO/
- https://security.gentoo.org/glsa/202107-10
Affected products (2)
- cpe:2.3:a:tpm2_software_stack_project:tpm2_software_stack:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
More vulnerabilities in Tpm2 Software Stack Project Tpm2 Software Stack
- CVE-2023-22745 — Medium (CVSS 6.4): tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2…
All CVEs affecting Tpm2 Software Stack Project Tpm2 Software Stack →
Other CWE-909 vulnerabilities
- CVE-2022-22704 — Critical (CVSS 9.8): The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the…
- CVE-2024-8178 — High (CVSS 8.8): The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing…
- CVE-2021-29980 — High (CVSS 8.8): Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a…
- CVE-2021-23994 — High (CVSS 8.8): A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This…
- CVE-2020-11741 — High (CVSS 8.8): An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain…
- CVE-2024-9780 — High (CVSS 7.8): ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file