VDB
CVE-2025-1057
CVE-2025-1057
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0
EPSS 0.40% · 33.9th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS Score
0.40%
33.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 9 | |
| 7.12.0 | ||
| PyPI | keylime | 7.12.0, 7.12.0 |
| Red Hat | Red Hat Enterprise Linux 10 |
Timeline
- Feb 14, 2025 CVE Published
- Mar 15, 2025 PoC Published
- Mar 15, 2025 PoC Published
- Mar 15, 2025 PoC Published
- Mar 16, 2025 EPSS Score
- Mar 21, 2025 Coalition ESS Score
- Mar 30, 2025 EPSS Score
- Apr 13, 2025 EPSS Score
- Apr 28, 2025 EPSS Score
- May 12, 2025 EPSS Score
- May 26, 2025 EPSS Score
- Jun 9, 2025 EPSS Score
References
- https://github.com/keylime/keylime/security/advisories/GHSA-9jxq-5x44-gx23 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-1057 advisory
- https://github.com/keylime/keylime/commit/e08b10d86c3717006774e787542c190e2ba24fc7 url
- https://access.redhat.com/security/cve/CVE-2025-1057 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2343894 url
- https://github.com/advisories/GHSA-9jxq-5x44-gx23 advisory
- https://github.com/ansasaki/keylime/tree/base64_bytes url
- https://github.com/keylime/keylime package
- https://github.com/keylime/rust-keylime url
- https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2026-1488.yaml url
- https://pypi.org/project/keylime url