Skip to content
OpenAdvisories
High RHSA-2023:5080 2 CVEs

Red Hat Security Advisory: keylime security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime 0:6.5.2-6.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-base 0:6.5.2-6.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-registrar 0:6.5.2-6.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-selinux 0:6.5.2-6.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-tenant 0:6.5.2-6.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream keylime-verifier 0:6.5.2-6.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-keylime 0:6.5.2-6.el9_2

Vulnerabilities 2

  • High 7.5
    CVE-2023-38200

    Keylime: registrar is subject to a dos against ssl connections

    A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

    Red Hat Red Hat Enterprise Linux 9 keylime Linux PyPI
  • Medium 6.5
    CVE-2023-38201

    Keylime: challenge-response protocol bypass during agent registration

    A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is add…

    Red Hat Red Hat Enterprise Linux 9 keylime Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2222692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2222693
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5080.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-38200
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-38200
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-38200
  • article
    https://github.com/keylime/keylime/pull/1421
  • report
    https://access.redhat.com/security/cve/CVE-2023-38201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-38201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-38201
  • article
    https://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2a
  • article
    https://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcww