CVE-2021-3406 - AskarLabs CVE Database

CVE-2021-3406

Vendor N/A

Product keylime

Weakness CWE-347

Published February 25, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.

Key dates

02Disclosure timeline

February 25, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-3406 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/347.html

Related vulnerabilities

04Related CVE

CVE-2024-1721 CVE-2025-7937 Supermicro BMC firmware update validation bypass CVE-2026-32614 Go ShangMi SM9 Infinity-Point Ciphertext Forgery Vulnerability CVE-2026-50634 Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry CVE-2026-4115 PuTTY Ed25519 Signature ecc-ssh.c eddsa_verify signature verification