CVE-2023-38200

Summary

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

Affected Software

Weaknesses

• CWE-400: Uncontrolled Resource Consumption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://access.redhat.com/errata/RHSA-2023:5080
• https://access.redhat.com/security/cve/CVE-2023-38200
• https://bugzilla.redhat.com/show_bug.cgi?id=2222692
• https://github.com/keylime/keylime/pull/1421
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZIZZB5NHNCS5D2AEH3ZAO6OQC72IK7WS/

References

• https://access.redhat.com/errata/RHSA-2023:5080
• https://access.redhat.com/security/cve/CVE-2023-38200
• https://bugzilla.redhat.com/show_bug.cgi?id=2222692
• https://github.com/keylime/keylime/pull/1421

• ←Previous
• Next→