CVE-2022-3500

MediumCVSS 5.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.

Metrics

CVSS 3.1 5.1/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-248

Affected software

No affected versions have been published.

Timeline

Published
Nov 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-350005.5JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.CVE-2022-350025.5JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.CVE-2022-350037.8JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.CVE-2022-350045.5JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.CVE-2022-350076.5PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.incCVE-2022-350086.5PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.CVE-2022-350096.5PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.CVE-2022-35017.5Article template contents with sensitive data could be accessed from agents without permissions.CVE-2022-350106.5PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.CVE-2022-350118.8PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.CVE-2022-350126.5PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp.CVE-2022-350136.5PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp.