CVE-2021-3406

Description

References

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• keylime/keylime security advisory · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QAT

More vulnerabilities in keylime

• CVE-2026-1709CRITICAL 9.8A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authen…
• CVE-2023-38201MEDIUM 6.5A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue…
• CVE-2023-3674LOW 2.8A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signatur…
• CVE-2022-3500MEDIUM 5.1A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there ex…
• CVE-2022-23952HIGH 7.5In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.