medium5.5
CVE-2022-23951
In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.
Impact
In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Keylime | Keylime | before 6.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/keylime/keylime/commit/6e44758b64b0ee13564fc46e807f4ba98091c355
- https://github.com/keylime/keylime/security/advisories/GHSA-6xx7-m45w-76m2
- https://seclists.org/oss-sec/2022/q1/101
- https://github.com/keylime/keylime/commit/6e44758b64b0ee13564fc46e807f4ba98091c355
- https://github.com/keylime/keylime/security/advisories/GHSA-6xx7-m45w-76m2
- https://seclists.org/oss-sec/2022/q1/101