Vulnerabilities > CVE-2023-3674

CVSS 2.8 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

local

low complexity

keylime

fedoraproject

NVD

Published: 2023-07-19

Updated: 2024-11-21

Summary

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.

Vulnerable Configurations

Part	Description	Count
Application	Keylime Keylime Keylime - Keylime Keylime 2.0 Keylime Keylime 2.1 Keylime Keylime 2.1.1 Keylime Keylime 2.2 Keylime Keylime 2.3 Keylime Keylime 2.3.1 Keylime Keylime 2.3.2 Keylime Keylime 2.3.3 Keylime Keylime 2.3.4 Keylime Keylime 3.0.0 Keylime Keylime 3.1.0 Keylime Keylime 3.1.1 Keylime Keylime 4.0.0 Keylime Keylime 4.0.1 Keylime Keylime 5.0.0 Keylime Keylime 5.1.0 Keylime Keylime 5.2.0 Keylime Keylime 5.3.0 Keylime Keylime 5.3.1 Keylime Keylime 5.4.0 Keylime Keylime 5.4.1 Keylime Keylime 5.5.0 Keylime Keylime 5.6.0 Keylime Keylime 5.6.1 Keylime Keylime 5.6.2 Keylime Keylime 5.7.0 Keylime Keylime 5.7.1 Keylime Keylime 5.7.2 Keylime Keylime 5.7.3 Keylime Keylime 5.8.0 Keylime Keylime 5.8.1 Keylime Keylime 6.0.0 Keylime Keylime 6.0.1 Keylime Keylime 6.1.0 Keylime Keylime 6.1.1 Keylime Keylime 6.2.0 Keylime Keylime 6.2.1 Keylime Keylime 6.3.0 Keylime Keylime 6.3.1 Keylime Keylime 6.3.2 Keylime Keylime 6.4.0 Keylime Keylime 6.4.1 Keylime Keylime 6.4.2 Keylime Keylime 6.4.3 Keylime Keylime 6.5.0 Keylime Keylime 6.5.1 Keylime Keylime 6.5.2 Keylime Keylime 6.5.3 Keylime Keylime 6.6.0 Keylime Keylime 6.7.0 Keylime Keylime 7.0.0	52
OS	Fedoraproject Fedoraproject Fedora 38	1

Vulnerabilities > CVE-2023-3674 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2023-3674"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2023-3674