Summary
[6.5.2-6]
- Fix registrar is subject to a DoS against SSL (CVE-2023-38200)
Resolves: rhbz#2222694
- Fix challenge-protocol bypass during agent registration (CVE-2023-38201)
Resolves: rhbz#2222695
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | keylime | 0:6.5.2-6.el9_2 |
| Oracle Linux · 9 | keylime-base | 0:6.5.2-6.el9_2 |
| Oracle Linux · 9 | keylime-registrar | 0:6.5.2-6.el9_2 |
| Oracle Linux · 9 | keylime-selinux | 0:6.5.2-6.el9_2 |
| Oracle Linux · 9 | keylime-tenant | 0:6.5.2-6.el9_2 |
| Oracle Linux · 9 | keylime-verifier | 0:6.5.2-6.el9_2 |
| Oracle Linux · 9 | python3-keylime | 0:6.5.2-6.el9_2 |
Vulnerabilities 2
-
High 7.5
Keylime: registrar is subject to a dos against ssl connections
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.
-
Medium 6.5
Keylime: challenge-response protocol bypass during agent registration
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is add…