Skip to content
Keylime vulnerabilities
Newest
-
keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 more
Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication
CVE-2026-1709
Fix available
9.4 Critical
-
keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 more
Keylime: challenge-response protocol bypass during agent registration
CVE-2023-38201
Fix available
6.5 Medium
-
keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 more
Keylime: registrar is subject to a dos against ssl connections
CVE-2023-38200
Fix available
7.5 High
-
keylime, fedoraproject fedora, red hat enterprise linux 9 +2 more
Keylime: attestation failure when the quote's signature does not validate
CVE-2023-3674
Fix available
2.3 Low
-
keylime, fedoraproject fedora, redhat enterprise linux +2 more
Keylime: unhandled exceptions could lead to invalid attestation states
CVE-2022-3500
Fix available
5.1 Medium
-
keylime
keylime-agent-6.3.0-1.1 on GA media
CVE-2022-23952
7.5 High
-
keylime
keylime-agent-6.3.0-1.1 on GA media
CVE-2022-23951
5.5 Medium
-
keylime
keylime-agent-6.3.0-1.1 on GA media
CVE-2022-23950
7.5 High
-
keylime
keylime-agent-6.3.0-1.1 on GA media
CVE-2022-23949
7.5 High
-
keylime
keylime-agent-6.3.0-1.1 on GA media
CVE-2021-43310
9.8 Critical
-
keylime
keylime-agent-6.3.0-1.1 on GA media
CVE-2022-23948
7.5 High
-
keylime, fedoraproject fedora +1 more
Tenant and Verifier might not use the same registrar data
CVE-2022-1053
Fix available
9.1 Critical
-
keylime, fedoraproject fedora +1 more
A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.
CVE-2021-3406
9.8 Critical