Description
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | keylime +6 | 6.5.2-6.el9_2 | RHSA-2023:5080 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | keylime +6 | 6.5.2-6.el9_2.alma.1 | ALSA-2023:5080 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | keylime | 6.3.2-150400.4.17.1 | SUSE-SU-2023:3245-1 |
| SLES 15 SP4 | keylime | 6.3.2-150400.4.17.1 | SUSE-SU-2023:3245-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | keylime | 6.3.2-150400.4.17.1 | SUSE-SU-2023:3245-1 |
| openSUSE Leap 15.4 | keylime | 6.3.2-150400.4.17.1 | SUSE-SU-2023:3245-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | keylime +6 | 6.5.2-6.el9_2 | ELSA-2023-5080 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | keylime | < 7.4.0 | 7.4.0 | GHSA-pg75-v6fp-8q59 |
Advisories 5
- ALSA-2023:5080 Moderate: keylime security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2023:3245-1 Security update for keylime SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2023:5080 Red Hat Security Advisory: keylime security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- WID-SEC-2023-1931 Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 2, 2023
- ELSA-2023-5080 Moderate: keylime security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 13, 2023
References
- RHSA-2023:5080 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-38200 vdb-entry
- RHBZ#2222692 issue-tracking
- https://github.com/keylime/keylime/pull/1421