Launch Week Day 1: Announcing Security Design Review
HIGH 7.5 PyPI

Duplicate Advisory: Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

GHSA-9gjg-834p-5gvv

Published ยท Modified

Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-pg75-v6fp-8q59. This link is maintained to preserve external references.

Original Description

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.

Ready to move

Start Securing

Free, no credit card | First findings in minutes