A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade keylime-selinuxUpgrade keylime-registrarUpgrade keylime-tenantUpgrade keylimeUpgrade keylime-baseUpgrade keylime-verifierUpgrade python3-keylime | Sep 15, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade python3-keylimeUpgrade keylimeUpgrade keylime-baseUpgrade keylime-verifierUpgrade keylime-tenantUpgrade keylime-selinuxUpgrade keylime-registrar | Sep 13, 2023 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade keylime-baseUpgrade keylimeUpgrade keylime-verifierUpgrade keylime-registrarUpgrade keylime-selinuxUpgrade python3-keylimeUpgrade keylime-tenant | Sep 13, 2023 | Jul 12, 2023 |
| Redhat_linux | — | Upgrade keylimeUpgrade keylime-verifierUpgrade keylime-tenantUpgrade python3-keylimeUpgrade keylime-baseUpgrade keylime-registrarUpgrade keylime-selinux | Sep 13, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade keylime-firewalldUpgrade keylime-configUpgrade keylime-registrarUpgrade keylime-logrotateUpgrade keylime-verifierUpgrade python3-keylimeUpgrade keylime-agentUpgrade keylime-tpm_cert_store | Aug 9, 2023 | Jul 24, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub