SUSE-SU-2023:3245-1 Security update for keylime

This update for keylime fixes the following issues: - CVE-2023-38200: Fixed a DoS attack against it's SSL connections. bsc1213310...

GHSA-PG75-V6FP-8Q59 Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Impact Keylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents a...

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Impact Keylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents a...

GHSA-9GJG-834P-5GVV Duplicate Advisory: Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pg75-v6fp-8q59. This link is maintained to preserve external references. Original Description A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of...

Duplicate Advisory: Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pg75-v6fp-8q59. This link is maintained to preserve external references. Original Description A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of...

CVE-2023-38200

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

CVE-2023-38200

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

Design/Logic Flaw

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

CVE-2023-38200

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

CVE-2023-38200 Keylime: registrar is subject to a dos against ssl connections

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

CVE-2023-38200 Keylime: registrar is subject to a dos against ssl connections

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

CVE-2023-38200

Keylime registrar DoS (CVE-2023-38200) is the root cause: the registrar’s SSL handling is vulnerable to a remote denial of service that exhausts all available connections. Affected component is the Keylime registrar; impact is availability loss (DoS). Publicly documented fixes exist in multiple a...

CVE-2023-38200

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

PT-2023-26333

Name of the Vulnerable Software and Affected Versions Keylime versions prior to 7.4.0 Description A flaw was found in Keylime due to its blocking nature, making the Keylime registrar subject to a remote denial of service against its SSL connections. This allows an attacker to exhaust all availabl...

Keylime 安全漏洞

Keylime is an open source extensible trust system for Keylime that utilizes TPM technology. A security vulnerability exists in Keylime. An attacker exploited the vulnerability to cause a denial of service on the system...

CVE-2023-38200: Uncontrolled Resource Consumption

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections...

Denial Of Service (DoS)

keylime is vulnerable to Denial Of Service DoS. The vulnerability exists because the Registrar gets blocked after opening a single connection to its HTTPS interface which allows an attacker to cause an application crash...

Improper Signature Validation

keylime is vulnerable to Improper Signature Validation. The vulnerability exists in the checkquote function at tpmutil.py because the quote validation is not properly handed in the case of a malformed signature which could allow an attacker to perform unauthorized actions...

GHSA-G4WG-CFPF-9689 keylime fails to flag device as untrusted when signature does not validate

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...

keylime fails to flag device as untrusted when signature does not validate

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...