Red Hat Security Advisory

RHSA-2024:1139

keylime security update

Released 2024-03-05 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) keylime-7.3.0-13.el9_3, keylime-base-7.3.0-13.el9_3, keylime-registrar-7.3.0-13.el9_3 +4

Fixes 1 record

TI-2023-03431 CVE-2023-3674 · GHSA-g4wg-cfpf-9689

Keylime: attestation failure when the quote's signature does not validate

LOW 13

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00212 Published 2023-07-19 Fixed in 7.3.0-13.el9_3, 7.2.5 CWE-1283