Error Handling in keylime - CVE-2022-3500
Published: November 15, 2022
Vulnerability identifier: #VU69339
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3500
CWE-ID: CWE-388
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling when treating system level failures, such as network driver crash, causing the verifier component to quit and not recover. The verifier's state machine remains in "verified" state and the associated database is no longer updated for this agent.
Affected software
keylime
Oracle Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
keylime-agent
keylime-config
keylime-firewalld
keylime-registrar
keylime-tpm_cert_store
keylime-verifier
python3-keylime
keylime-logrotate
keylime
keylime (Red Hat package)
Oracle Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
keylime-agent
keylime-config
keylime-firewalld
keylime-registrar
keylime-tpm_cert_store
keylime-verifier
python3-keylime
keylime-logrotate
keylime
keylime (Red Hat package)
How to mitigate CVE-2022-3500
Install updates from vendor's website.
keylime - update to 6.5.1
keylime-agent - update to 6.3.2-150400.4.14.1
keylime-config - update to 6.3.2-150400.4.14.1
keylime-firewalld - update to 6.3.2-150400.4.14.1
keylime-registrar - update to 6.3.2-150400.4.14.1
keylime-tpm_cert_store - update to 6.3.2-150400.4.14.1
keylime-verifier - update to 6.3.2-150400.4.14.1
python3-keylime - update to 6.3.2-150400.4.14.1
keylime-logrotate - update to 6.3.2-150400.4.14.1
keylime - addressed in versions 6.4.3-2.fc35, 6.4.3-2.fc36, 6.4.3-5.fc37
keylime (Red Hat package) - update to 6.5.1-1.el9_1
keylime-agent - update to 6.3.2-150400.4.14.1
keylime-config - update to 6.3.2-150400.4.14.1
keylime-firewalld - update to 6.3.2-150400.4.14.1
keylime-registrar - update to 6.3.2-150400.4.14.1
keylime-tpm_cert_store - update to 6.3.2-150400.4.14.1
keylime-verifier - update to 6.3.2-150400.4.14.1
python3-keylime - update to 6.3.2-150400.4.14.1
keylime-logrotate - update to 6.3.2-150400.4.14.1
keylime - addressed in versions 6.4.3-2.fc35, 6.4.3-2.fc36, 6.4.3-5.fc37
keylime (Red Hat package) - update to 6.5.1-1.el9_1