EUVD-2022-0134

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Keylime does not enforce agent registrar data consistency, risking trust chain with EK validation errors.

Reporter	Title	Published	Views	Family All 25
Circl	CVE-2022-1053	6 May 202220:23	–	circl
CNNVD	Keylime 输入验证错误漏洞	6 May 202200:00	–	cnnvd
CVE	CVE-2022-1053	6 May 202216:45	–	cve
Cvelist	CVE-2022-1053	6 May 202216:45	–	cvelist
Fedora	[SECURITY] Fedora 36 Update: keylime-6.4.0-1.fc36	12 May 202220:26	–	fedora
Fedora	[SECURITY] Fedora 35 Update: keylime-6.4.0-1.fc35	13 May 202201:37	–	fedora
Fedora	[SECURITY] Fedora 34 Update: keylime-6.4.0-1.fc34	13 May 202201:42	–	fedora
Github Security Blog	Tenant and Verifier might not use the same registrar data	5 May 202215:59	–	github
NVD	CVE-2022-1053	6 May 202217:15	–	nvd
OpenVAS	Fedora: Security Advisory for keylime (FEDORA-2022-7c9173843a)	14 May 202200:00	–	openvas

[
  {
    "enisaIdVendor": [
      {
        "id": "41e6b7ad-9490-3a9a-8b98-18aecac81e77",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5d
github	www.github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5,
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/
github	www.github.com/advisories/GHSA-jf66-3q76-h5p5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-1053
github	www.github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2022-184.yaml
suse	www.suse.com/security/cve/CVE-2022-1053.html

03 Oct 2025 20:07Current

9High risk

Vulners AI Score9

CVSS 3.19.1

CVSS 26.4

EPSS0.0047