Description
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | keylime +6 | 6.5.2-6.el9_2 | RHSA-2023:5080 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | keylime +6 | 6.5.2-6.el9_2.alma.1 | ALSA-2023:5080 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | keylime | 6.3.2-150400.4.20.1 | SUSE-SU-2023:3525-1 |
| SLES 15 SP4 | keylime | 6.3.2-150400.4.20.1 | SUSE-SU-2023:3525-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | keylime | 6.3.2-150400.4.20.1 | SUSE-SU-2023:3525-1 |
| openSUSE Leap 15.4 | keylime | 6.3.2-150400.4.20.1 | SUSE-SU-2023:3525-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | keylime +6 | 6.5.2-6.el9_2 | ELSA-2023-5080 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | keylime | < 7.5.0 | 7.5.0 | GHSA-f4r5-q63f-gcww |
Advisories 5
- ALSA-2023:5080 Moderate: keylime security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2023:3525-1 Security update for keylime SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2023:5080 Red Hat Security Advisory: keylime security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- WID-SEC-2023-2323 Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 2, 2023
- ELSA-2023-5080 Moderate: keylime security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 13, 2023