Lucene search
OracleLinuxELSA-2024-1139HistoryMar 06, 2024 - 12:00 a.m.
keylime security update
2024-03-0600:00:00
linux.oracle.com
4
keylime
security update
cve-2023-3674
rhel-21013
unix
2.8 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
7.4 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.5%
[7.3.0-13]
- Backport fix for CVE-2023-3674
Resolves: RHEL-21013
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | keylime | < 7.3.0-13.el9_3 | keylime-7.3.0-13.el9_3.src.rpm |
| oracle linux | 9 | aarch64 | keylime | < 7.3.0-13.el9_3 | keylime-7.3.0-13.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | keylime-base | < 7.3.0-13.el9_3 | keylime-base-7.3.0-13.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | keylime-registrar | < 7.3.0-13.el9_3 | keylime-registrar-7.3.0-13.el9_3.aarch64.rpm |
| oracle linux | 9 | noarch | keylime-selinux | < 7.3.0-13.el9_3 | keylime-selinux-7.3.0-13.el9_3.noarch.rpm |
| oracle linux | 9 | aarch64 | keylime-tenant | < 7.3.0-13.el9_3 | keylime-tenant-7.3.0-13.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | keylime-verifier | < 7.3.0-13.el9_3 | keylime-verifier-7.3.0-13.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | python3-keylime | < 7.3.0-13.el9_3 | python3-keylime-7.3.0-13.el9_3.aarch64.rpm |
| oracle linux | 9 | src | keylime | < 7.3.0-13.el9_3 | keylime-7.3.0-13.el9_3.src.rpm |
| oracle linux | 9 | x86_64 | keylime | < 7.3.0-13.el9_3 | keylime-7.3.0-13.el9_3.x86_64.rpm |
Related
almalinux
almalinux
Low: keylime security update
2024-03-05 00:00:00
osv
osv
Low: keylime security update
2024-05-10 14:32:42
Low: keylime security update
2024-03-05 00:00:00
keylime fails to flag device as untrusted when signature does not validate
2023-07-19 21:30:23
redhat
redhat
(RHSA-2024:1139) Low: keylime security update
2024-03-05 15:32:21
cvelist
cvelist
redhatcve
redhatcve
CVE-2023-3674
2023-07-14 13:05:51
rocky
rocky
keylime security update
2024-05-10 14:32:42
github
github
keylime fails to flag device as untrusted when signature does not validate
2023-07-19 21:30:23
veracode
veracode
Improper Signature Validation
2023-07-20 10:30:29
nessus
nessus
RHEL 9 : keylime (RHSA-2024:1139)
2024-03-05 00:00:00
AlmaLinux 9 : keylime (ALSA-2024:1139)
2024-03-07 00:00:00
Rocky Linux 9 : keylime (RLSA-2024:1139)
2024-05-14 00:00:00
nvd
nvd
CVE-2023-3674
2023-07-19 19:15:12
prion
prion
Design/Logic Flaw
2023-07-19 19:15:00
cve
cve
CVE-2023-3674
2023-07-19 19:15:12
2.8 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
7.4 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.5%
Related for ELSA-2024-1139