CVE-2023-3674 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-3674 Interim 1 12 2026-03-05T03:55:19Z current 2023-07-14T23:20:43Z 2026-03-05T03:55:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-3674 A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Tumbleweed keylime keylime-7.3.0-13.el9_3 keylime-agent keylime-base-7.3.0-13.el9_3 keylime-config keylime-config-7.11.0-1.1 keylime-config-7.11.0-160000.2.2 keylime-firewalld keylime-firewalld-7.11.0-1.1 keylime-firewalld-7.11.0-160000.2.2 keylime-logrotate keylime-logrotate-7.11.0-1.1 keylime-logrotate-7.11.0-160000.2.2 keylime-registrar keylime-registrar-7.11.0-1.1 keylime-registrar-7.11.0-160000.2.2 keylime-registrar-7.3.0-13.el9_3 keylime-selinux-7.3.0-13.el9_3 keylime-tenant-7.11.0-1.1 keylime-tenant-7.11.0-160000.2.2 keylime-tenant-7.3.0-13.el9_3 keylime-tpm_cert_store keylime-tpm_cert_store-7.11.0-1.1 keylime-tpm_cert_store-7.11.0-160000.2.2 keylime-verifier keylime-verifier-7.11.0-1.1 keylime-verifier-7.11.0-160000.2.2 keylime-verifier-7.3.0-13.el9_3 python3-keylime python3-keylime-7.3.0-13.el9_3 python310-keylime-7.11.0-1.1 python311-keylime-7.11.0-1.1 python312-keylime-7.11.0-1.1 python313-keylime-7.11.0-160000.2.2 keylime-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 keylime-base-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 keylime-registrar-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 keylime-selinux-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 keylime-tenant-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 keylime-verifier-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 python3-keylime-7.3.0-13.el9_3 as a component of SUSE Liberty Linux 9 keylime-config-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-firewalld-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-logrotate-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-registrar-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-tenant-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-tpm_cert_store-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-verifier-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-keylime-7.11.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 keylime-config-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-firewalld-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-logrotate-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-registrar-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-tenant-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-tpm_cert_store-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-verifier-7.11.0-1.1 as a component of openSUSE Tumbleweed python310-keylime-7.11.0-1.1 as a component of openSUSE Tumbleweed python311-keylime-7.11.0-1.1 as a component of openSUSE Tumbleweed python312-keylime-7.11.0-1.1 as a component of openSUSE Tumbleweed keylime-agent as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-config as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-firewalld as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-logrotate as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-registrar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-verifier as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python3-keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 keylime-agent as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-config as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-firewalld as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-logrotate as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-registrar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime-verifier as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 python3-keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted. CVE-2023-3674 SUSE Liberty Linux 9:keylime-7.3.0-13.el9_3 SUSE Liberty Linux 9:keylime-base-7.3.0-13.el9_3 SUSE Liberty Linux 9:keylime-registrar-7.3.0-13.el9_3 SUSE Liberty Linux 9:keylime-selinux-7.3.0-13.el9_3 SUSE Liberty Linux 9:keylime-tenant-7.3.0-13.el9_3 SUSE Liberty Linux 9:keylime-verifier-7.3.0-13.el9_3 SUSE Liberty Linux 9:python3-keylime-7.3.0-13.el9_3 SUSE Linux Enterprise Server 16.0:keylime-config-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-firewalld-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-logrotate-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-registrar-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-tenant-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-tpm_cert_store-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:keylime-verifier-7.11.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-keylime-7.11.0-160000.2.2 openSUSE Tumbleweed:keylime-config-7.11.0-1.1 openSUSE Tumbleweed:keylime-firewalld-7.11.0-1.1 openSUSE Tumbleweed:keylime-logrotate-7.11.0-1.1 openSUSE Tumbleweed:keylime-registrar-7.11.0-1.1 openSUSE Tumbleweed:keylime-tenant-7.11.0-1.1 openSUSE Tumbleweed:keylime-tpm_cert_store-7.11.0-1.1 openSUSE Tumbleweed:keylime-verifier-7.11.0-1.1 openSUSE Tumbleweed:python310-keylime-7.11.0-1.1 openSUSE Tumbleweed:python311-keylime-7.11.0-1.1 openSUSE Tumbleweed:python312-keylime-7.11.0-1.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-agent SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-config SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-firewalld SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-logrotate SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-registrar SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-tpm_cert_store SUSE Linux Enterprise Module for Basesystem 15 SP4:keylime-verifier SUSE Linux Enterprise Module for Basesystem 15 SP4:python3-keylime SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-agent SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-config SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-firewalld SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-logrotate SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-registrar SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-tpm_cert_store SUSE Linux Enterprise Module for Basesystem 15 SP5:keylime-verifier SUSE Linux Enterprise Module for Basesystem 15 SP5:python3-keylime moderate 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N