CVE-2020-24331: An issue was discovered in TrouSerS through 0.3.14.

Security readout for executives and security teams

TrouSerS is software used with TPM 1.2 services. This CVE concerns unsafe access to its daemon configuration file: when tcsd runs as root, the tss user can still read and write /etc/tcsd.conf. Treat this as a local hardening and integrity issue, not a confirmed internet-exploited vulnerability. Exposure is likely limited to systems with TrouSerS/tcsd installed, especially Linux distributions using TPM 1.2 support. Risk depends on package version, whether tcsd runs as root, and whether /etc/tcsd.conf permissions allow tss read/write access. Prioritize remediation on servers or endpoints where TPM 1.2 services are enabled and local users are present. This is not currently evidenced as actively exploited, but it affects a root-run security service configuration file. Mitigation focus: Apply vendor distribution updates for TrouSerS security fixes.; Review Fedora, SUSE, and upstream TrouSerS guidance for fixed packaging.; Restrict /etc/tcsd.conf permissions according to vendor guidance..

Prepared

Jun 3, 2026, 10:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.