CVE:CVE-2023-3674
CNNVD:CNNVD-202307-1696
Keylime是Keylime的一个利用 TPM 技术的开源可扩展信任系统。
keylime存在安全漏洞，该漏洞源于keylime验证程序无法将设备提交的TPM quote标记为有错误。
solution:Upgrade keylime keylime to a higher version than 7.2.5,and avoid the version (,7.2.5); Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38