20426 matches found
GHSA-XH5W-G8GQ-R3V9 Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
CVE-2025-13609
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
PYSEC-2025-77
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
PYSEC-2025-77
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
CVE-2025-13609
CVE-2025-13609 is exposed in multiple advisories for keylime across Linux vendors. The vulnerability allows a registrar to be overwhelmed by registering a new agent that reuses an existing UUID but with a different TPM identity, enabling identity takeover of a legitimate agent and potential bypas...
CVE-2025-13609
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
EUVD-2025-198980
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
Use of Multiple Resources with Duplicate Identifier
Overview keylime is a TPM-based key bootstrapping and system integrity measurement system for cloud Affected versions of this package are vulnerable to Use of Multiple Resources with Duplicate Identifier due to the registrar’s failure to enforce uniqueness of agent UUIDs. An attacker can...
Zero-Day Zero: The AI Attack That Just Ended the Era of the Forgiving Internet
Why the Exploit Window Has Collapsed and How CISOs Must Pivot to Survive For decades, cybersecurity was a game of time. We banked on the buffer between a vulnerability’s disclosure and its widespread exploitation. We relied on the forgiving internet, where human attackers needed days or weeks to...
EUVD-2025-198756
Malicious code in @posthog/agent npm...
Malicious code in @posthog/agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183eda8dff43d0fa91f3006a2c3af5a268788a2dc9be3e53bd44d685b02f8432 The package @posthog/agent was found to contain malicious code. Source: ghsa-malware 1e1b7c3425dec8a1aa33daab74dd9163958811fa344ee6f8a795252daec78529...
MAL-2025-190748 Malicious code in @posthog/agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183eda8dff43d0fa91f3006a2c3af5a268788a2dc9be3e53bd44d685b02f8432 The package @posthog/agent was found to contain malicious code. Source: ghsa-malware 1e1b7c3425dec8a1aa33daab74dd9163958811fa344ee6f8a795252daec78529...
Malicious code in @postman/tunnel-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198643
Malicious code in @postman/tunnel-agent npm...
MAL-2025-190647 Malicious code in @postman/tunnel-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2025:4191-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...
Security update for podman
This update for podman fixes the following issues: CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253542 Patch Instructions: To install this SUSE update use the SUSE...
SUSE-SU-2025:4185-1 Security update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253542...