A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-keylimeUpgrade keylime-verifierUpgrade keylime-selinuxUpgrade keylime-registrarUpgrade keylimeUpgrade keylime-tenantUpgrade keylime-base | Sep 15, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade keylimeUpgrade python3-keylimeUpgrade keylime-verifierUpgrade keylime-tenantUpgrade keylime-selinuxUpgrade keylime-registrarUpgrade keylime-base | Sep 13, 2023 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade keylime-baseUpgrade keylime-registrarUpgrade keylimeUpgrade keylime-verifierUpgrade keylime-tenantUpgrade python3-keylimeUpgrade keylime-selinux | Sep 13, 2023 | Jul 12, 2023 |
| Redhat_linux | — | Upgrade keylime-tenantUpgrade keylime-baseUpgrade keylime-selinuxUpgrade python3-keylimeUpgrade keylime-registrarUpgrade keylimeUpgrade keylime-verifier | Sep 13, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade keylime-configUpgrade keylime-registrarUpgrade keylime-firewalldUpgrade keylime-verifierUpgrade keylime-logrotateUpgrade keylime-agentUpgrade python3-keylimeUpgrade keylime-tpm_cert_store | Aug 9, 2023 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub