Vulnerabilities > CVE-2022-23951 - Unspecified vulnerability in Keylime

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2022-09-21

Updated: 2022-09-22

Summary

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

Part	Description	Count
Application	Keylime Keylime Keylime - Keylime Keylime 2.0 Keylime Keylime 2.1 Keylime Keylime 2.1.1 Keylime Keylime 2.2 Keylime Keylime 2.3 Keylime Keylime 2.3.1 Keylime Keylime 2.3.2 Keylime Keylime 2.3.3 Keylime Keylime 2.3.4 Keylime Keylime 3.0.0 Keylime Keylime 3.1.0 Keylime Keylime 3.1.1 Keylime Keylime 4.0.0 Keylime Keylime 4.0.1 Keylime Keylime 5.0.0 Keylime Keylime 5.1.0 Keylime Keylime 5.2.0 Keylime Keylime 5.3.0 Keylime Keylime 5.3.1 Keylime Keylime 5.4.0 Keylime Keylime 5.4.1 Keylime Keylime 5.5.0 Keylime Keylime 5.6.0 Keylime Keylime 5.6.1 Keylime Keylime 5.6.2 Keylime Keylime 5.7.0 Keylime Keylime 5.7.1 Keylime Keylime 5.7.2 Keylime Keylime 5.7.3 Keylime Keylime 5.8.0 Keylime Keylime 5.8.1 Keylime Keylime 6.0.0 Keylime Keylime 6.0.1 Keylime Keylime 6.1.0 Keylime Keylime 6.1.1 Keylime Keylime 6.2.0 Keylime Keylime 6.2.1	38