p PatchFirst

CVE-2023-38200

CVE-2023-38200 · Keylime: registrar is subject to a dos against ssl connections

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

CVSS 7.5 · High · EPSS 1.4% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • red hat enterprise linux 9

    Versions
    • ≥ 0:6.5.2-6.el9_2: Not affected (rpm)

    No fix published

  • keylime PyPI

    Versions
    • 6.3.1
    • 6.3.2
    • 6.4.0
    • 6.4.1
    • 6.4.2
    • 6.4.3
    • 6.5.0
    • 6.5.1
    • 6.5.2
    • 6.5.3
    • 6.6.0
    • 6.8.0
    • 7.0.0
    • 7.2.5
    • 7.3.0
    Affected ranges
    • ECOSYSTEM: < 7.4.0

    Update to 7.4.0

Original sources

Check your server →