https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:04:14 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:5080 <p><strong>Affected:</strong> AlmaLinux:9: keylime, AlmaLinux:9: keylime-base, AlmaLinux:9: keylime-registrar, AlmaLinux:9: keylime-selinux, AlmaLinux:9: keylime-tenant, AlmaLinux:9: keylime-verifier, AlmaLinux:9: python3-keylime</p> <p>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.</p> <p>Security Fix(es):</p> <p>* keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200) * Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: keylime, AlmaLinux:9: keylime-base, AlmaLinux:9: keylime-registrar, AlmaLinux:9: keylime-selinux, AlmaLinux:9: keylime-tenant, AlmaLinux:9: keylime-verifier, AlmaLinux:9: python3-keylime</p> <p>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.</p> <p>Security Fix(es):</p> <p>* keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200) * Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:5080 https://cve.radiocsirt.org/vuln/euvd-2026-261486 EUVD-2026-261486 https://cve.radiocsirt.org/vuln/euvd-2026-261486 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38200 <p>A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.</p> <p>A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38200 https://cve.radiocsirt.org/vuln/ghsa-pg75-v6fp-8q59 <p><strong>Affected:</strong> PyPI: keylime</p> <p>### Impact Keylime `registrar` is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port (by default, port `8891`) blocking further, legitimate connections. As long as the connection is open, the `registrar` is blocked and cannot serve any further clients (`agents` and `tenants`), which prevents normal operation. The problem does not affect the `verifier`.</p> <p>### Patches Users should upgrade to release 7.4.0</p> <p><strong>Affected:</strong> PyPI: keylime</p> <p>### Impact Keylime `registrar` is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port (by default, port `8891`) blocking further, legitimate connections. As long as the connection is open, the `registrar` is blocked and cannot serve any further clients (`agents` and `tenants`), which prevents normal operation. The problem does not affect the `verifier`.</p> <p>### Patches Users should upgrade to release 7.4.0</p> https://cve.radiocsirt.org/vuln/ghsa-pg75-v6fp-8q59 https://cve.radiocsirt.org/vuln/gsd-2023-38200 gsd-2023-38200 https://cve.radiocsirt.org/vuln/gsd-2023-38200 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13096-1 <p>keylime-config-7.4.0-1.1 on GA media</p> <p>keylime-config-7.4.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13096-1 https://cve.radiocsirt.org/vuln/pysec-2026-1489 <p><strong>Affected:</strong> PyPI: keylime</p> <p>### Impact Keylime `registrar` is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port (by default, port `8891`) blocking further, legitimate connections. As long as the connection is open, the `registrar` is blocked and cannot serve any further clients (`agents` and `tenants`), which prevents normal operation. The problem does not affect the `verifier`.</p> <p>### Patches Users should upgrade to release 7.4.0</p> <p><strong>Affected:</strong> PyPI: keylime</p> <p>### Impact Keylime `registrar` is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port (by default, port `8891`) blocking further, legitimate connections. As long as the connection is open, the `registrar` is blocked and cannot serve any further clients (`agents` and `tenants`), which prevents normal operation. The problem does not affect the `verifier`.</p> <p>### Patches Users should upgrade to release 7.4.0</p> https://cve.radiocsirt.org/vuln/pysec-2026-1489 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1931 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1931