https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:34:13 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:1139 <p><strong>Affected:</strong> AlmaLinux:9: keylime, AlmaLinux:9: keylime-base, AlmaLinux:9: keylime-registrar, AlmaLinux:9: keylime-selinux, AlmaLinux:9: keylime-tenant, AlmaLinux:9: keylime-verifier, AlmaLinux:9: python3-keylime</p> <p>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.</p> <p>Security Fix(es):</p> <p>* keylime: Attestation failure when the quote&#39;s signature does not validate (CVE-2023-3674)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: keylime, AlmaLinux:9: keylime-base, AlmaLinux:9: keylime-registrar, AlmaLinux:9: keylime-selinux, AlmaLinux:9: keylime-tenant, AlmaLinux:9: keylime-verifier, AlmaLinux:9: python3-keylime</p> <p>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.</p> <p>Security Fix(es):</p> <p>* keylime: Attestation failure when the quote&#39;s signature does not validate (CVE-2023-3674)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:1139 https://cve.radiocsirt.org/vuln/euvd-2026-261608 EUVD-2026-261608 https://cve.radiocsirt.org/vuln/euvd-2026-261608 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3674 <p>A flaw was found in the keylime attestation verifier, which fails to flag a device&#39;s submitted TPM quote as faulty when the quote&#39;s signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.</p> <p>A flaw was found in the keylime attestation verifier, which fails to flag a device&#39;s submitted TPM quote as faulty when the quote&#39;s signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3674 https://cve.radiocsirt.org/vuln/ghsa-g4wg-cfpf-9689 <p><strong>Affected:</strong> PyPI: keylime</p> <p>A flaw was found in the keylime attestation verifier, which fails to flag a device&#39;s submitted TPM quote as faulty when the quote&#39;s signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.</p> <p><strong>Affected:</strong> PyPI: keylime</p> <p>A flaw was found in the keylime attestation verifier, which fails to flag a device&#39;s submitted TPM quote as faulty when the quote&#39;s signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.</p> https://cve.radiocsirt.org/vuln/ghsa-g4wg-cfpf-9689 https://cve.radiocsirt.org/vuln/gsd-2023-3674 gsd-2023-3674 https://cve.radiocsirt.org/vuln/gsd-2023-3674 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14051-1 <p>keylime-config-7.11.0-1.1 on GA media</p> <p>keylime-config-7.11.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14051-1 https://cve.radiocsirt.org/vuln/pysec-2023-128 <p><strong>Affected:</strong> PyPI: keylime</p> <p>A flaw was found in the keylime attestation verifier, which fails to flag a device&#39;s submitted TPM quote as faulty when the quote&#39;s signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.</p> <p><strong>Affected:</strong> PyPI: keylime</p> <p>A flaw was found in the keylime attestation verifier, which fails to flag a device&#39;s submitted TPM quote as faulty when the quote&#39;s signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.</p> https://cve.radiocsirt.org/vuln/pysec-2023-128 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0558 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren oder um vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren oder um vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0558