CVE-2023-40551 — Out-of-bounds Read in Redhat Shim

CWE-125 — Out-of-bounds Read7 documents7 sources
Severity
5.1MEDIUMNVD
EPSS
0.0%
top 96.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Redhat ShimFedoraproject FedoraRedhat Enterprise Linux
Timeline
PublishedJan 29

Description

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:HExploitability: 0.8 | Impact: 4.2

Affected Packages2 packages

▶NVDredhat/shim< 15.8
▶Debianredhat/shim< 15.8-1~deb11u1+3

Also affects: Fedora 39, Enterprise Linux 8.0, 9.0

🔴Vulnerability Details

3
OSV
CVE-2023-40551: A flaw was found in the MZ binary format in Shim↗2024-01-29
▶
CVEList
Shim: out of bounds read when parsing mz binaries↗2024-01-29
▶
GHSA
GHSA-6j62-7qgg-9gww: A flaw was found in the MZ binary format in Shim↗2024-01-29
▶

📋Vendor Advisories

3
Red Hat
shim: out of bounds read when parsing MZ binaries↗2024-01-23
▶
Microsoft
Shim: out of bounds read when parsing mz binaries↗2024-01-09
▶
Debian
CVE-2023-40551: shim - A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occu...↗2023
▶