Description
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:6.5.2-6.el9_2 to < *unaffected
References
- https://access.redhat.com/errata/RHSA-2023:5080 ↗
- https://access.redhat.com/security/cve/CVE-2023-38200 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2222692 ↗
- https://github.com/keylime/keylime/pull/1421 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIZZB5NHNCS5D2AEH3ZAO6OQC72IK7WS/ ↗