Description
In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | keylime | keylime 6.3.0 | — |
Medium · 5.5
CVE-2022-23951
EUVD-2022-28867
In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.
Published Sep 21, 2022 · Updated May 27, 2025 · Assigned by fedora