← All advisories

Unrated severityNVD Advisory· Published Sep 21, 2022· Updated May 27, 2025

CVE-2022-23951

CVE-2022-23951

Description

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Keylime/Keylimecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <6.3.0

Patches

Vulnerability mechanics

References

3

github.com/keylime/keylime/commit/6e44758b64b0ee13564fc46e807f4ba98091c355mitrex_refsource_MISC
github.com/keylime/keylime/security/advisories/GHSA-6xx7-m45w-76m2mitrex_refsource_MISC
seclists.org/oss-sec/2022/q1/101mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.