CVE-2022-23951

Published September 21st, 2022

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

keylime/keylime

A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT

GitHub

538