CVE-2022-3500
22.11.2022, 19:15
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| keylime | keylime | 𝑥 < 6.5.1 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| keylime |
| ||
| keylime-base |
| ||
| keylime-registrar |
| ||
| keylime-selinux |
| ||
| keylime-tenant |
| ||
| keylime-verifier |
| ||
| python3-keylime |
|
Common Weakness Enumeration
References