Lucene search

keylime fails to flag device as untrusted when signature does not validate

🗓️ 19 Jul 2023 21:23:30Reported by GitHub Advisory DatabaseType

keylime attestation verifier fails to flag device as untrusted due to signature validation failur

Reporter	Title	Published	Views	Family All 22
Vulnrichment	CVE-2023-3674 Keylime: attestation failure when the quote's signature does not validate	19 Jul 202318:25	–	vulnrichment
OSV	PYSEC-2023-128	19 Jul 202319:15	–	osv
OSV	keylime fails to flag device as untrusted when signature does not validate	19 Jul 202321:30	–	osv
OSV	Red Hat Security Advisory: keylime security update	16 Sep 202417:05	–	osv
OSV	keylime-config-7.11.0-1.1 on GA media	17 Jun 202400:00	–	osv
OSV	Low: keylime security update	10 May 202414:32	–	osv
OSV	Low: keylime security update	5 Mar 202400:00	–	osv
OSV	CVE-2023-3674	19 Jul 202319:15	–	osv
Veracode	Improper Signature Validation	20 Jul 202310:30	–	veracode
Tenable Nessus	AlmaLinux 9 : keylime (ALSA-2024:1139)	7 Mar 202400:00	–	nessus

Vulners

Node

keylime keylimeRange<7.2.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-3674
github	www.github.com/keylime/keylime/commit/95ce3d86bd2c53009108ffda2dcf553312d733db
access	www.access.redhat.com/security/cve/CVE-2023-3674
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2023-128.yaml
access	www.access.redhat.com/errata/RHSA-2024:1139
github	www.github.com/advisories/GHSA-g4wg-cfpf-9689

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jul 2023 21:30Current

6.8Medium risk

Vulners AI Score6.8

CVSS32.3

EPSS0.000

CWE-1283