{"id":"CVE-2023-38201","aliases":["ALSA-2023:5080","EUVD-2023-0106","GHSA-f4r5-q63f-gcww","PYSEC-2023-160","RHSA-2023:5080","SUSE-SU-2023:3525-1","openSUSE-SU-2024:13287-1"],"status":"published","title":"Keylime: challenge-response protocol bypass during agent registration","description":"A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0049,"percentile":0.42421,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-639"],"published":"2023-08-25T16:15:39Z","modified":"2026-10-29T11:31:30Z","fixes":[{"ecosystem":"PyPI","package":"keylime","fixed_in":["7.5.0"],"sources":["ghsa","osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"keylime","fixed_in":["6.3.2-150400.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"keylime","fixed_in":["6.3.2-150400.4.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"keylime","fixed_in":["6.3.2-150400.4.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"keylime","fixed_in":["6.3.2-150400.4.20.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime-registrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime-tenant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime-verifier","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-6.el9_2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0"}]}],"versions":["6.3.1","6.3.2","6.4.0","6.4.1","6.4.2","6.4.3","6.5.0","6.5.1","6.5.2","6.5.3","6.6.0","6.8.0","7.0.0","7.2.5","7.3.0","7.4.0"]},{"source":"osv","ecosystem":"PyPI","package":"keylime","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"9e5ac9f25cd400b16d5969f531cee28290543f2a"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0"}]}],"versions":["6.3.1","6.3.2","6.4.0","6.4.1","6.4.2","6.4.3","6.5.0","6.5.1","6.5.2","6.5.3","6.6.0","6.8.0","7.0.0","7.2.5","7.3.0","7.4.0"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-registrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-tenant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-verifier","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.2-6.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.4.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.4.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.4.20.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"keylime","product":"keylime"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_server_aus"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:5080","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38201","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222693","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web","fix"]},{"url":"https://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2a","tags":["x_transferred","Patch","fix","web","article"]},{"url":"https://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcww","tags":["x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIZZB5NHNCS5D2AEH3ZAO6OQC72IK7WS/","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38201","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2023-160.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIZZB5NHNCS5D2AEH3ZAO6OQC72IK7WS","tags":["web"]},{"url":"https://github.com/advisories/GHSA-f4r5-q63f-gcww"},{"url":"https://access.redhat.com/security/cve/CVE-2023-38200","tags":["report"]},{"url":"https://bugzilla.redhat.com/2222692","tags":["report"]},{"url":"https://bugzilla.redhat.com/2222693","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5080.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38201.json","tags":["advisory"]},{"url":"https://github.com/keylime/keylime","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222692","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5080.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38200","tags":["advisory"]},{"url":"https://github.com/keylime/keylime/pull/1421","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38201","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233525-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213314","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38201","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-38201","title":"Keylime: challenge-response protocol bypass during agent registration","description":"A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.","status":"published","published":"2023-08-25T16:15:39.449Z","modified":"2025-11-20T17:41:38.96Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:35:29.772612Z"}],"euvd":[{"id":"EUVD-2023-0106","description":"A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.","status":"published","published":"2023-08-25T16:15:39Z","modified":"2025-11-20T17:41:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:14.564249Z"}],"ghsa":[{"id":"GHSA-f4r5-q63f-gcww","title":"Keylime registrar and (untrusted) Agent can be bypassed by an attacker","description":"### Impact\n\nA security issue was found in the Keylime `registrar` code which allows an attacker to effectively bypass the challenge-response protocol used to verify that an `agent` has indeed access to an AIK which in indeed related to the EK.\n\nWhen an `agent` starts up, it will contact a `registrar` and provide a public EK and public AIK, in addition to the EK Certificate. This `registrar` will then challenge the `agent` to decrypt a challenge encrypted with the EK. \n\nWhen receiving the wrong \"auth_tag\" back from the `agent` during activation, the `registrar` answers with an error message that contains the expected correct \"auth_tag\" (an HMAC which is calculated within the `registrar` for checking). An attacker could simply record the correct expected \"auth_tag\" from the HTTP error message and perform the activate call again with the correct expected \"auth_tag\" for the `agent`.\n\nThe security issue allows an attacker to pass the challenge-response protocol during registration with (almost) arbitrary registration data. In particular, the attacker can provide a valid EK Certificate and EK, which passes verification by the `tenant` (or `registrar`), while using a compromised AIK, which is stored unprotected outside the TPM and is unrelated to former two. The attacker then deliberately fails the initial activation call to get to know the correct \"auth_tag\" and then provides it in a subsequent activation call. This results in an `agent` which is (incorrectly) registered with a valid EK Certificate, but with a compromised/unrelated AIK.\n\n### Patches\nUsers should upgrade to release 7.5.0","status":"published","published":"2023-09-06T13:49:43Z","modified":"2024-09-27T21:25:28Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:38:06.988799Z"}],"nvd":[{"id":"CVE-2023-38201","description":"A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.","status":"published","published":"2023-08-25T17:15:08.53Z","modified":"2026-06-17T06:09:39.233Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:08:25.025396Z"}],"osv":[{"id":"CVE-2023-38201","title":"Keylime: challenge-response protocol bypass during agent registration","description":"A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.","status":"published","published":"2023-08-25T16:15:39.449Z","modified":"2026-10-28T02:30:21.258435837Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"GHSA-f4r5-q63f-gcww","title":"Keylime registrar and (untrusted) Agent can be bypassed by an attacker","description":"### Impact\n\nA security issue was found in the Keylime `registrar` code which allows an attacker to effectively bypass the challenge-response protocol used to verify that an `agent` has indeed access to an AIK which in indeed related to the EK.\n\nWhen an `agent` starts up, it will contact a `registrar` and provide a public EK and public AIK, in addition to the EK Certificate. This `registrar` will then challenge the `agent` to decrypt a challenge encrypted with the EK. \n\nWhen receiving the wrong \"auth_tag\" back from the `agent` during activation, the `registrar` answers with an error message that contains the expected correct \"auth_tag\" (an HMAC which is calculated within the `registrar` for checking). An attacker could simply record the correct expected \"auth_tag\" from the HTTP error message and perform the activate call again with the correct expected \"auth_tag\" for the `agent`.\n\nThe security issue allows an attacker to pass the challenge-response protocol during registration with (almost) arbitrary registration data. In particular, the attacker can provide a valid EK Certificate and EK, which passes verification by the `tenant` (or `registrar`), while using a compromised AIK, which is stored unprotected outside the TPM and is unrelated to former two. The attacker then deliberately fails the initial activation call to get to know the correct \"auth_tag\" and then provides it in a subsequent activation call. This results in an `agent` which is (incorrectly) registered with a valid EK Certificate, but with a compromised/unrelated AIK.\n\n### Patches\nUsers should upgrade to release 7.5.0","status":"published","published":"2023-09-06T13:49:43Z","modified":"2026-07-08T06:53:11.696307593Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T15:46:46.006631Z"},{"id":"PYSEC-2023-160","description":"A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.","status":"published","published":"2023-08-25T17:15:00Z","modified":"2023-11-08T04:13:06.956471Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"RHSA-2023:5080","title":"Red Hat Security Advisory: keylime security update","status":"published","published":"2024-09-16T12:49:02Z","modified":"2025-11-22T12:55:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"ALSA-2023:5080","title":"Moderate: keylime security update","description":"Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.\n\nSecurity Fix(es):\n\n* keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200)\n* Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-12T00:00:00Z","modified":"2026-10-29T11:31:30.63533526Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"openSUSE-SU-2024:13287-1","title":"keylime-config-7.6.0-1.1 on GA media","description":"These are all security issues fixed in the keylime-config-7.6.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:40:56.343293Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:3525-1","title":"Security update for keylime","description":"This update for keylime fixes the following issues:\n\n- CVE-2023-38201: Fixed a bug to avoid leaks of the authorization tag. (bsc#1213314)\n","status":"published","published":"2023-09-05T07:55:26Z","modified":"2026-02-04T02:34:39.005392Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}