PT-2023-25692 · Keylime+3 · Keylime+3

Mauro Matteo Cascella · Published 2023-07-19 · Updated 2025-01-20 · CVE-2023-3674

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions keylime (affected versions not specified)

Description A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1283

Related Identifiers

ALSA-2024:1139

CVE-2023-3674

GHSA-G4WG-CFPF-9689

INFSA-2024_1139

OPENSUSE-SU-2024:14051-1

PYSEC-2023-128

RHSA-2024:1139

RHSA-2024_1139

RLSA-2024:1139

Affected Products

Almalinux

Red Hat

Rocky Linux

Keylime

References · 19

• https://github.com/keylime/keylime/commit/95ce3d86bd2c53009108ffda2dcf553312d733db · Patch
• https://osv.dev/vulnerability/ALSA-2024:1139 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-1139.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:1139 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2023-128 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:1139 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14051-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:1139 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-3674 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2222903 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-3674 · Security Note
• https://osv.dev/vulnerability/GHSA-g4wg-cfpf-9689 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-1139.html · Vendor Advisory
• https://github.com/keylime/keylime · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2023-128.yaml · Note