CVE-2026-1709

< 7.12.0

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (T

9.4CRITICAL

CVE-2023-38201

< 7.5.0

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration.

6.5MEDIUM

CVE-2023-38200

all versions

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against

7.5HIGH

CVE-2023-3674

< 7.2.5

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote'

2.3LOW

CVE-2022-3500

< 6.5.1

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions

5.1MEDIUM

CVE-2022-23952

< 6.3.0

In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-read

7.5HIGH

CVE-2022-23951

< 6.3.0

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

5.5MEDIUM

CVE-2022-23950

< 6.3.0

In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a me

7.5HIGH

CVE-2022-23949

< 6.3.0

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registr

7.5HIGH

CVE-2022-23948

< 6.3.0

A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previous

7.5HIGH

CVE-2021-43310

< 6.3.0

A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the

9.8CRITICAL

CVE-2022-1053

< 6.4.0

Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity q

9.1CRITICAL

CVE-2021-3406

<= 5.8.1

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain

9.8CRITICAL