GCVE - cpe:2.3:a:n/a:keylime:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:keylime:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Keylime (`987e2e2c-9858-5430-beae-178e00d25328`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-3500`	vulnerable	2026-06-08 05:48:21.291961	Details available A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore. Published: 2022-11-22T00:00:00.000Z Updated: 2025-04-29T04:27:39.253Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3500 https://github.com/keylime/keylime/pull/1128 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQH5CJRX65QYMQN5WGUKKKE3IRJBWG5Z/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QX4XVCAUFGJ2I2NCTOKONTJGRJB2NBBT/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUTHMDVFNGGVPCNPOGULMJAAFEP7MEXP/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23952`	vulnerable	2026-06-08 05:40:59.379629	Details available In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable. Published: 2022-09-21T18:25:13.000Z Updated: 2025-05-22T18:31:00.234Z Open on db.gcve.eu Reference links https://seclists.org/oss-sec/2022/q1/101 https://github.com/keylime/keylime/security/advisories/GHSA-fchm-5w2v-qfm8 https://github.com/keylime/keylime/commit/883085d6a4bcea3012729014d5b8e15ecd65fc7c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23951`	vulnerable	2026-06-08 05:40:59.379174	Details available In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs. Published: 2022-09-21T18:25:07.000Z Updated: 2025-05-27T20:16:04.351Z Open on db.gcve.eu Reference links https://seclists.org/oss-sec/2022/q1/101 https://github.com/keylime/keylime/security/advisories/GHSA-6xx7-m45w-76m2 https://github.com/keylime/keylime/commit/6e44758b64b0ee13564fc46e807f4ba98091c355	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23950`	vulnerable	2026-06-08 05:40:59.378738	Details available In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations. Published: 2022-09-21T18:25:02.000Z Updated: 2025-05-27T20:34:06.188Z Open on db.gcve.eu Reference links https://seclists.org/oss-sec/2022/q1/101 https://github.com/keylime/keylime/security/advisories/GHSA-9r9r-f8xc-m875 https://github.com/keylime/keylime/commit/ea5d0373fa2c050d5d95404eb779be7e8327b911	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23949`	vulnerable	2026-06-08 05:40:59.378280	Details available In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar. Published: 2022-09-21T18:23:47.000Z Updated: 2025-05-27T20:34:51.145Z Open on db.gcve.eu Reference links https://seclists.org/oss-sec/2022/q1/101 https://github.com/keylime/keylime/security/advisories/GHSA-87gh-qc28-j9mm https://github.com/keylime/keylime/commit/387e320dc22c89f4f47c68cb37eb9eec2137f34b https://github.com/keylime/keylime/commit/e429e95329fc60608713ddfb82f4a92ee3b3d2d9 https://github.com/keylime/keylime/commit/65c2b737129b5837f4a03660aeb1191ced275a57	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23948`	vulnerable	2026-06-08 05:40:59.376916	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1053`	vulnerable	2026-06-08 05:39:12.071037	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43310`	vulnerable	2026-06-08 05:36:43.138881	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3406`	vulnerable	2026-06-08 05:33:51.270571	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.