CVE-2022-23951 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-23951 Interim 1 17 2026-03-05T04:46:42Z current 2022-01-30T02:32:03Z 2026-03-05T04:46:42Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-23951 In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Tumbleweed keylime keylime-agent keylime-agent-6.3.0-1.1 keylime-agent-6.3.0-150400.2.5 keylime-agent-6.3.2-150400.4.14.1 keylime-agent-6.3.2-150400.4.20.1 keylime-config keylime-config-6.3.0-1.1 keylime-config-6.3.0-150400.2.5 keylime-config-6.3.2-150400.4.14.1 keylime-config-6.3.2-150400.4.20.1 keylime-config-7.11.0-160000.2.2 keylime-firewalld keylime-firewalld-6.3.0-1.1 keylime-firewalld-6.3.0-150400.2.5 keylime-firewalld-6.3.2-150400.4.14.1 keylime-firewalld-6.3.2-150400.4.20.1 keylime-firewalld-7.11.0-160000.2.2 keylime-logrotate keylime-logrotate-6.3.2-150400.4.14.1 keylime-logrotate-6.3.2-150400.4.20.1 keylime-logrotate-7.11.0-160000.2.2 keylime-registrar keylime-registrar-6.3.0-1.1 keylime-registrar-6.3.0-150400.2.5 keylime-registrar-6.3.2-150400.4.14.1 keylime-registrar-6.3.2-150400.4.20.1 keylime-registrar-7.11.0-160000.2.2 keylime-tenant-7.11.0-160000.2.2 keylime-tpm_cert_store keylime-tpm_cert_store-6.3.0-1.1 keylime-tpm_cert_store-6.3.0-150400.2.5 keylime-tpm_cert_store-6.3.2-150400.4.14.1 keylime-tpm_cert_store-6.3.2-150400.4.20.1 keylime-tpm_cert_store-7.11.0-160000.2.2 keylime-verifier keylime-verifier-6.3.0-1.1 keylime-verifier-6.3.0-150400.2.5 keylime-verifier-6.3.2-150400.4.14.1 keylime-verifier-6.3.2-150400.4.20.1 keylime-verifier-7.11.0-160000.2.2 python3-keylime python3-keylime-6.3.0-150400.2.5 python3-keylime-6.3.2-150400.4.14.1 python3-keylime-6.3.2-150400.4.20.1 python310-keylime-6.3.0-1.1 python313-keylime-7.11.0-160000.2.2 python38-keylime-6.3.0-1.1 python39-keylime-6.3.0-1.1 keylime-agent-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-config-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-firewalld-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-registrar-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-tpm_cert_store-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-verifier-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python3-keylime-6.3.0-150400.2.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-agent-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-config-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-firewalld-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-logrotate-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-registrar-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-tpm_cert_store-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-verifier-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 python3-keylime-6.3.2-150400.4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-agent-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-config-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-firewalld-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-logrotate-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-registrar-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-tpm_cert_store-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-verifier-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 python3-keylime-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-agent-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-config-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-firewalld-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-logrotate-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-registrar-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-tpm_cert_store-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-verifier-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 python3-keylime-6.3.2-150400.4.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-config-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-firewalld-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-logrotate-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-registrar-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-tenant-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-tpm_cert_store-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-verifier-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-keylime-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-agent-6.3.0-1.1 as a component of openSUSE Tumbleweed keylime-config-6.3.0-1.1 as a component of openSUSE Tumbleweed keylime-firewalld-6.3.0-1.1 as a component of openSUSE Tumbleweed keylime-registrar-6.3.0-1.1 as a component of openSUSE Tumbleweed keylime-tpm_cert_store-6.3.0-1.1 as a component of openSUSE Tumbleweed keylime-verifier-6.3.0-1.1 as a component of openSUSE Tumbleweed python310-keylime-6.3.0-1.1 as a component of openSUSE Tumbleweed python38-keylime-6.3.0-1.1 as a component of openSUSE Tumbleweed python39-keylime-6.3.0-1.1 as a component of openSUSE Tumbleweed keylime-agent as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-config as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-firewalld as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-logrotate as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-registrar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-verifier as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python3-keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs. CVE-2022-23951 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-agent-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-config-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-firewalld-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-registrar-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-tpm_cert_store-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-verifier-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP4:python3-keylime-6.3.0-150400.2.5 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-agent-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-config-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-firewalld-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-logrotate-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-registrar-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-tpm_cert_store-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-verifier-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:python3-keylime-6.3.2-150400.4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-agent-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-config-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-firewalld-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-logrotate-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-registrar-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-tpm_cert_store-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:keylime-verifier-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:python3-keylime-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-agent-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-config-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-firewalld-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-logrotate-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-registrar-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-tpm_cert_store-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-verifier-6.3.2-150400.4.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-keylime-6.3.2-150400.4.20.1 SUSE Linux Enterprise Server 16.0:keylime-config-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-firewalld-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-logrotate-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-registrar-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-tenant-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-tpm_cert_store-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-verifier-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-keylime-7.11.0-160000.2.2 openSUSE Tumbleweed:keylime-agent-6.3.0-1.1 openSUSE Tumbleweed:keylime-config-6.3.0-1.1 openSUSE Tumbleweed:keylime-firewalld-6.3.0-1.1 openSUSE Tumbleweed:keylime-registrar-6.3.0-1.1 openSUSE Tumbleweed:keylime-tpm_cert_store-6.3.0-1.1 openSUSE Tumbleweed:keylime-verifier-6.3.0-1.1 openSUSE Tumbleweed:python310-keylime-6.3.0-1.1 openSUSE Tumbleweed:python38-keylime-6.3.0-1.1 openSUSE Tumbleweed:python39-keylime-6.3.0-1.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-agent SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-config SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-firewalld SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-logrotate SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-registrar SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-tpm_cert_store SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-verifier SUSE Linux Enterprise Module for Basesystem 15 SP4:python3-keylime moderate 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H