CVE-2023-40549
EUVD-2023-4512029.01.2024, 17:15
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | shim | 𝑥 < 15.8 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| secureboot-db |
| ||||||||||||||||||
| shim |
| ||||||||||||||||||
| shim-signed |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mokutil |
| ||||||||||||||||||||||||||
| shim-aa64 |
| ||||||||||||||||||||||||||
| shim-ia32 |
| ||||||||||||||||||||||||||
| shim-unsigned-ia32 |
| ||||||||||||||||||||||||||
| shim-unsigned-x64 |
| ||||||||||||||||||||||||||
| shim-x64 |
|
Common Weakness Enumeration
References