CVE-2021-3406 | BDVDB-2026-149647 Detail

keylime

Description#

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-347

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1932469
https://github.com/keylime/keylime/security/advisories/GHSA-78f8-6c68-375m
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QAT/

Exploit#

No public exploit known

History#

Version 12021-02-25Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.