Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-1057

Good to know:

icon
icon

Date: March 15, 2025

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas the updated registrar expects str. This issue leads to an exception when processing agent registration requests, causing the agent to fail.

Severity Score

Related Resources (7)

https://github.com/keylime/keylime/commit/e08b10d86c3717006774e787542c190e2ba24fc7
https://github.com/keylime/keylime/security/advisories/GHSA-9jxq-5x44-gx23
https://github.com/keylime/keylime
https://nvd.nist.gov/vuln/detail/CVE-2025-1057
https://access.redhat.com/security/cve/CVE-2025-1057
https://bugzilla.redhat.com/show_bug.cgi?id=2343894
https://www.mend.io/vulnerability-database/CVE-2025-1057

Severity Score

Weakness Type (CWE)

Incorrect Type Conversion or Cast

CWE-704

Improper Validation of Specified Type of Input

CWE-1287

Top Fix

icon

Upgrade Version

Upgrade to version keylime - 7.12.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

Do you need more information?

Contact Us