Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-38200
HistoryJul 24, 2023 - 12:00 a.m.

CVE-2023-38200

2023-07-2400:00:00
ubuntu.com
ubuntu.com
5
keylime
registrar
denial of service
ssl
unix
cve-2023-38200

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.9%

A flaw was found in Keylime. Due to their blocking nature, the Keylime
registrar is subject to a remote denial of service against its SSL
connections. This flaw allows an attacker to exhaust all available
connections.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.9%