Description
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.
References (5)
Scores
CVSS v3
7.5
EPSS
0.0024
EPSS Percentile
47.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-400
CWE-834
Status
published
Products (10)
fedoraproject/fedora
38
keylime/keylime
pypi/keylime
0 - 7.4.0PyPI
redhat/enterprise_linux
9.0
redhat/enterprise_linux_eus
9.2
redhat/enterprise_linux_for_ibm_z_systems
9.0_s390x
redhat/enterprise_linux_for_ibm_z_systems_eus
9.2_s390x
redhat/enterprise_linux_for_power_little_endian
9.0_ppc64le
redhat/enterprise_linux_for_power_little_endian_eus
9.0_ppc64le
redhat/enterprise_linux_server_aus
9.2
Published
Jul 24, 2023
Tracked Since
Feb 18, 2026