Rocky Linux 9 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2022_8444)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228444 advisory. keylime: exception handling and impedance match in tornadorequests CVE-2022-3500 Tenable has extracted the preceding description block directly from the CIQ securit...

ALSA-2022:8444 Moderate: keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fixes: keylime: exception handling and impedance match in tornadorequests CVE-2022-3500 For more details about the security issues, including the impact, a CVSS score,...

Denial Of Service (DoS)

keylime is vulnerable to denial of service. The vulnerability is due to a lack of proper exception handling in the request function of tornadorequests.py which allows an attacker to crash the application via malicious input...