Uncaught Exception
CVE-2022-3500
Summary
A vulnerability was found in keylime prior to 6.5.1. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.
- HIGH
- LOCAL
- NONE
- UNCHANGED
- NONE
- NONE
- NONE
- HIGH
CWE-248 - Uncaught Exception
An exception is thrown from a function, but it is not caught.
References
Advisory Timeline
- Published