CVE-2023-38200
24.07.2023, 16:15
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| keylime | keylime | - |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux_eus | 9.2 |
| redhat | enterprise_linux_for_ibm_z_systems | 9.0_s390x:_s390x |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 9.2_s390x:_s390x |
| redhat | enterprise_linux_for_power_little_endian | 9.0_ppc64le:_ppc64le |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.0_ppc64le:_ppc64le |
| redhat | enterprise_linux_server_aus | 9.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| keylime |
| ||
| keylime-base |
| ||
| keylime-registrar |
| ||
| keylime-selinux |
| ||
| keylime-tenant |
| ||
| keylime-verifier |
| ||
| python3-keylime |
|
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-834 - Excessive IterationThe software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
References