SUSE: Security Advisory (SUSE-SU-2022:2658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: keylime-agent / keylime-config / keylime-firewalld / etc (SUSE-SU-2022:2658-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2658-1 advisory. Update to version 6.3.2, including fixes for: - CVE-2022-1053: Fixed Tenant and Verifier might n...

CVE-2022-1053

creationtimestamp| type| source ---|---|--- 2022-05-06 20:23:00+00:00| seen| https://t.me/cibsecurity/42123...

CVE-2022-1053

Keylime vulnerability CVE-2022-1053: the tenant and verifier could use mismatched registrar data during EK/identity quote validation, allowing an AK/EK pair from a real TPM to pass EK validation and fool the verifier by presenting an AK from a software TPM. This undermines the integrity of the ch...