vulnerability

Oracle Linux: CVE-2022-3500: ELSA-2022-8444: keylime security update (MODERATE)

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
Oct 27, 2022
Added
Nov 24, 2022
Modified
Dec 3, 2025

Description

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.
A vulnerability was found in keylime. This issue occurs due to improperly handled exceptions. A rogue agent could potentially create errors on the verifier that stopped attestation attempts for that host, leaving it in an attested state but not verified.

Solutions

oracle-linux-upgrade-keylimeoracle-linux-upgrade-keylime-baseoracle-linux-upgrade-keylime-registraroracle-linux-upgrade-keylime-selinuxoracle-linux-upgrade-keylime-tenantoracle-linux-upgrade-keylime-verifieroracle-linux-upgrade-python3-keylime
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.