CVE Database
/

CVE-2023-38200

Back to search

CVE-2023-38200

Published: Jul 24, 2023

Modified: Nov 20, 2025

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

VendorProductVersions

Red Hat

Red Hat Enterprise Linux 9

unaffected
0:6.5.2-6.el9_2 - < *

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

RHSA-2023:5080
vendor-advisory
x_refsource_REDHAT
RHBZ#2222692
issue-tracking
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now