Keylime Strict Type Checking Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability exists in Keylime version 7.12.0 due to strict type checking that prevents the registrar from processing agent registration data from previous versions, such as 7.11.0. Older versions store registration data as bytes, while the updated registrar requires strings. This mismatch causes exceptions when handling registration requests, resulting in agent failures.

Impact

Exploitation of this vulnerability causes agents to fail during registration, leading to a denial-of-service condition.