dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Keylime HIGH 7.5
CVE-2022-23949

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar.

Fix: 6.3.0+
Fix from $1,950 2022-09-21
Keylime HIGH 7.5
CVE-2022-23950

In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit ke…

Fix: 6.3.0+
Fix from $1,950 2022-09-21
Keylime HIGH 7.5
CVE-2022-23952

In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.

Fix: 6.3.0+
Fix from $1,950 2022-09-21
Keylime MEDIUM 5.5
CVE-2022-23951

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

Fix: 6.3.0+
Fix from $1,600 2022-09-21
Keylime CRITICAL 9.8
CVE-2021-43310

A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re…

Fix: 6.3.0+
Fix from $2,300 2022-09-21
Keylime HIGH 7.5
CVE-2022-23948

A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previously created unprivil…

Fix: 6.3.0+
Fix from $1,950 2022-09-21