https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:12:12.194290+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:5080 ALSA-2023:5080 — Moderate: keylime security update 2026-10-03T10:12:12.328750+00:00

Affected: AlmaLinux:9: keylime, AlmaLinux:9: keylime-base, AlmaLinux:9: keylime-registrar, AlmaLinux:9: keylime-selinux, AlmaLinux:9: keylime-tenant, AlmaLinux:9: keylime-verifier, AlmaLinux:9: python3-keylime

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

* keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200) * Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-261486 EUVD-2026-261486 2026-10-03T10:12:12.328818+00:00 EUVD-2026-261486 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38200 fkie_cve-2023-38200 2026-10-03T10:12:12.328836+00:00

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

 https://cve.radiocsirt.org/vuln/ghsa-pg75-v6fp-8q59 GHSA-pg75-v6fp-8q59 — Keylime's registrar vulnerable to Denial-of-service attack via a single open connection 2026-10-03T10:12:12.328861+00:00

Affected: PyPI: keylime

### Impact Keylime `registrar` is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port (by default, port `8891`) blocking further, legitimate connections. As long as the connection is open, the `registrar` is blocked and cannot serve any further clients (`agents` and `tenants`), which prevents normal operation. The problem does not affect the `verifier`.

### Patches Users should upgrade to release 7.4.0

 https://cve.radiocsirt.org/vuln/gsd-2023-38200 gsd-2023-38200 2026-10-03T10:12:12.328885+00:00 gsd-2023-38200 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13096-1 openSUSE-SU-2024:13096-1 — keylime-config-7.4.0-1.1 on GA media 2026-10-03T10:12:12.328897+00:00

keylime-config-7.4.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1489 PYSEC-2026-1489 — Keylime's registrar vulnerable to Denial-of-service attack via a single open connection 2026-10-03T10:12:12.328914+00:00

Affected: PyPI: keylime

### Impact Keylime `registrar` is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port (by default, port `8891`) blocking further, legitimate connections. As long as the connection is open, the `registrar` is blocked and cannot serve any further clients (`agents` and `tenants`), which prevents normal operation. The problem does not affect the `verifier`.

### Patches Users should upgrade to release 7.4.0

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1931 WID-SEC-W-2023-1931 — Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Denial of Service 2026-10-03T10:12:12.328933+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.