Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how keylime compares to other vendors in security performance

View Risk Score →

Keylime KeylimeKeylime: keylime: security bypass due to hardcoded tpm quote nonce

Risk 40
Severity
6.3
EPSS
0.01%
First published (updated )
CVE-2026-6420

Keylime Keylime verifier (push model)Keylime verifier uses a hardcoded challenge nonce for TPM quote attestation instead of generating a …

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2458889

pip/keylimeKeylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

Risk 86
Severity
9.8
First published (updated )
CVE-2026-1709

Keylime KeylimeKeylime: keylime: registrar allows identity takeover via duplicate uuid registration

Risk 57
Severity
8.2
First published (updated )
CVE-2025-13609

Keylime Keylime registrarThe Keylime registrar allows registration of another agent (different TPM device, different EK certi…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2416761
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Keylime KeylimeA flaw was found in Keylime. Due to added strict type checking, Keylime fails to read data from a da…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2343894

redhat/keylimeKeylime: challenge-response protocol bypass during agent registration

Risk 40
Severity
6.5
First published (updated )
CVE-2023-38201

Fedoraproject FedoraKeylime: registrar is subject to a dos against ssl connections

Risk 45
Severity
7.5
First published (updated )
CVE-2023-38200

redhat/keylimeKeylime: attestation failure when the quote's signature does not validate

Risk 16
Severity
2.8
First published (updated )
CVE-2023-3674

Fedoraproject FedoraA vulnerability was found in keylime. This security issue happens in some circumstances, due to some…

Risk 32
Severity
5.1
First published (updated )
CVE-2022-3500
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Keylime KeylimeInfoleak

Risk 45
Severity
7.5
First published (updated )
CVE-2022-23952

Keylime KeylimeIn Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data whic…

Risk 33
Severity
5.5
First published (updated )
CVE-2022-23951

Keylime KeylimeIn Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can…

Risk 45
Severity
7.5
First published (updated )
CVE-2022-23950

Keylime KeylimeIn Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofi…

Risk 45
Severity
7.5
First published (updated )
CVE-2022-23949

Keylime KeylimeA vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that rese…

Risk 89
Severity
9.8
First published (updated )
CVE-2021-43310
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Keylime KeylimeInfoleak

Risk 45
Severity
7.5
First published (updated )
CVE-2022-23948

fedoraproject fedoraInput Validation

Risk 70
Severity
9.1
First published (updated )
CVE-2022-1053

Hello list, I have been reviewing the Keylime TPM remote attestation solution [1] which resulted in…

First published (updated )
https://seclists.org/oss-sec/2022/q1/101

redhat/keylimeA flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code inval…

Risk 88
Severity
9.8
First published (updated )
CVE-2021-3406

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203