CVE-2023-38201: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.

Affected products

• Fedoraproject Fedora: version 38 only
• Keylime Keylime: before 7.5.0 (fixed in 7.5.0)
• Red Hat Enterprise Linux: version 9.0 only
• Red Hat Enterprise Linux Eus: version 9.2 only
• Red Hat Enterprise Linux For IBM Z Systems: version 9.0_s390x only
• Red Hat Enterprise Linux For IBM Z Systems Eus: version 9.2_s390x only
• Red Hat Enterprise Linux For Power Little Endian: version 9.0_ppc64le only
• Red Hat Enterprise Linux For Power Little Endian Eus: version 9.2_ppc64le only
• Red Hat Enterprise Linux Server Aus: version 9.2 only

Published 2023-08-25. Last modified 2026-06-17.