Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

keylime

pypi

TPM-based key bootstrapping and system integrity measurement system for cloud

View on github.com · View on pypi.org

Security Advisories for keylime in pypi

Moderate
4 months ago

Keylime has a hardcoded attestation challenge nonce that allows replay attacks GSA_kwCzR0hTQS1xOHc2LXc1NWMtY2N2Nc4ABWj3

pypi keylime
Critical
7 months ago

Keylime Missing Authentication for Critical Function and Improper Authentication GSA_kwCzR0hTQS00anFwLTlxanYtNTdtMs4ABSDO

pypi keylime
High
9 months ago

Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices GSA_kwCzR0hTQS14aDV3LWc4Z3EtcjN2Oc4ABO2J

pypi keylime
Moderate
over 1 year ago

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0 GSA_kwCzR0hTQS05anhxLTV4NDQtZ3gyM84ABEft

pypi keylime
High
almost 3 years ago

Keylime registrar and (untrusted) Agent can be bypassed by an attacker GSA_kwCzR0hTQS1mNHI1LXE2M2YtZ2N3d84AA1uk

pypi keylime
High
about 3 years ago

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection GSA_kwCzR0hTQS1wZzc1LXY2ZnAtOHE1Oc4AA0_Q

pypi keylime
Moderate
about 3 years ago

keylime fails to flag device as untrusted when signature does not validate GSA_kwCzR0hTQS1nNHdnLWNmcGYtOTY4Oc4AA0zn

pypi keylime
High
almost 4 years ago

Keylime: unhandled exceptions could lead to invalid attestation states GSA_kwCzR0hTQS1oZmYyLXgyajktZ3hnds4AAvlh

pypi Keylime
Critical
over 4 years ago

Tenant and Verifier might not use the same registrar data GSA_kwCzR0hTQS1qZjY2LTNxNzYtaDVwNc3jTg

pypi keylime

Filter by Severity

High 4 Moderate 3 Critical 2