Known vulnerabilities in n/a keylime

Is your version affected?

CVE	Summary	Score	Published
CVE-2022-3500	A vulnerability was found in keylime	5.1 Medium	Nov 22, 2022
CVE-2022-23952	In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data,…	7.5 High	Sep 21, 2022
CVE-2022-23951	In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip…	5.5 Medium	Sep 21, 2022
CVE-2022-23950	In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow…	7.5 High	Sep 21, 2022
CVE-2022-23949	In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier…	7.5 High	Sep 21, 2022
CVE-2021-43310	A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V…	9.8 Critical	Sep 21, 2022
CVE-2022-23948	A flaw was found in Keylime before 6.3.0	7.5 High	Sep 21, 2022
CVE-2022-1053	Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK…	Not rated	May 6, 2022
CVE-2021-3406	A flaw was found in keylime 5.8.1 and older	Not rated	Feb 25, 2021