Skip to content
OpenAdvisories

Package · PyPI

keylime

9 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.2

    Keylime: keylime: registrar allows identity takeover via duplicate uuid registration

    A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legi…

  • High 7.5

    Keylime: registrar is subject to a dos against ssl connections

    A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.