← All advisories

Medium severity5.5NVD Advisory· Published Sep 21, 2022· Updated Jun 17, 2026

CVE-2022-23951

CVE-2022-23951

Description

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Keylime/Keylime3 versions
cpe:2.3:a:keylime:keylime:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:keylime:keylime:*:*:*:*:*:*:*:*range: <6.3.0
- (no CPE)
- (no CPE)range: <6.3.0

Patches

Vulnerability mechanics

References

3

github.com/keylime/keylime/commit/6e44758b64b0ee13564fc46e807f4ba98091c355nvdPatchThird Party Advisory
seclists.org/oss-sec/2022/q1/101nvdExploitMailing ListPatchThird Party Advisory
github.com/keylime/keylime/security/advisories/GHSA-6xx7-m45w-76m2nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.