Lucene search
Redhat.comRH:CVE-2022-3500HistoryOct 29, 2022 - 12:16 a.m.
CVE-2022-3500
2022-10-2900:16:47
redhat.com
access.redhat.com
32
keylime
vulnerability
exceptions
attestation
verifier
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.3%
A vulnerability was found in keylime. This issue occurs due to improperly handled exceptions. A rogue agent could potentially create errors on the verifier that stopped attestation attempts for that host, leaving it in an attested state but not verified.
Related
openvas
openvas
Fedora: Security Advisory for keylime (FEDORA-2022-8ad3246cc0)
2022-12-19 00:00:00
Fedora: Security Advisory for keylime (FEDORA-2022-7a312cde45)
2022-12-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4204-1)
2022-11-24 00:00:00
nessus
nessus
Fedora 36 : keylime (2022-8ad3246cc0)
2022-12-23 00:00:00
RHEL 9 : keylime (RHSA-2022:8444)
2022-11-16 00:00:00
Rocky Linux 9 : keylime (RLSA-2022:8444)
2023-11-06 00:00:00
oraclelinux
oraclelinux
keylime security update
2022-11-24 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: keylime-6.4.3-2.fc35
2022-12-11 01:48:21
[SECURITY] Fedora 37 Update: keylime-6.4.3-5.fc37
2022-12-19 01:16:22
[SECURITY] Fedora 36 Update: keylime-6.4.3-2.fc36
2022-12-19 01:18:15
cve
cve
CVE-2022-3500
2022-11-22 19:15:17
prion
prion
Design/Logic Flaw
2022-11-22 19:15:00
osv
osv
Moderate: keylime security update
2022-11-15 15:35:49
PYSEC-2022-42995
2022-11-22 19:15:00
Moderate: keylime security update
2022-11-15 00:00:00
rocky
rocky
keylime security update
2022-11-15 15:35:49
cvelist
cvelist
CVE-2022-3500
2022-11-22 00:00:00
almalinux
almalinux
Moderate: keylime security update
2022-11-15 00:00:00
github
github
Keylime: unhandled exceptions could lead to invalid attestation states
2022-10-28 19:19:42
veracode
veracode
Denial Of Service (DoS)
2022-11-08 03:14:18
redhat
redhat
(RHSA-2022:8444) Moderate: keylime security update
2022-11-15 15:35:49
nvd
nvd
CVE-2022-3500
2022-11-22 19:15:17
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.3%
Related for RH:CVE-2022-3500