CVE-2022-23951CWE-400

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs

Medium · published September 21, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-09-21T18:25Z
EPSS history
Timeline
  • 21 SEP 18:25Z
    In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs
    cvelistv5