Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2022-23949 In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar. Keylime 6.3.0+ Fix from $1,9502022-09-21 HIGH 7.5 CVE-2022-23950 In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit ke… Keylime 6.3.0+ Fix from $1,9502022-09-21 HIGH 7.5 CVE-2022-23952 In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable. Keylime 6.3.0+ Fix from $1,9502022-09-21 MEDIUM 5.5 CVE-2022-23951 In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs. Keylime 6.3.0+ Fix from $1,6002022-09-21 CRITICAL 9.8 CVE-2021-43310 A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re… Keylime 6.3.0+ Fix from $2,3002022-09-21 HIGH 7.5 CVE-2022-23948 A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previously created unprivil… Keylime 6.3.0+ Fix from $1,9502022-09-21