Most recent entries from all

ALSA-2024:1902 — Important: shim security update

Affected: AlmaLinux:8: shim-aa64, AlmaLinux:8: shim-ia32, AlmaLinux:8: shim-x64

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

Security Fix(es):

* shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547) * shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (CVE-2023-40548) * shim: Out-of-bounds read printing error messages (CVE-2023-40546) * shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file (CVE-2023-40549) * shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550) * shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-00725

BELL-CVE-2023-40547

Affected: Alpaquita:23: shim, Alpaquita:23: shim-signed, Alpaquita:stream: shim, Alpaquita:stream: shim-signed

certfr-2024-avi-0470 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0470

cnvd-2024-09863

ESBA-2024:0600 — bugfix update for shim 15.8-4.el8_10.1

bugfix update for shim 15.8-4.el8_10.1

EUVD-2026-330506

fkie_cve-2023-40547

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise. This flaw is only exploitable during the early boot phase, an attacker needs to perform a Man-in-the-Middle or compromise the boot server to be able to exploit this vulnerability successfully.

GHSA-qjqj-4cq6-6f2f

gsd-2023-40547

OESA-2024-1115 — shim security update

Affected: openEuler:20.03-LTS-SP1: shim

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fix(es): A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547) A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.(CVE-2023-40551)

RHSA-2024:1834 — Red Hat Security Advisory: shim security update

shim: Out-of-bounds read printing error messages shim: RCE in http boot support may lead to Secure Boot bypass shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file shim: Out-of-bound read in verify_buffer_sbat() shim: out of bounds read when parsing MZ binaries

SUSE-SU-2024:1461-1 — Security update for shim

Security update for shim

UBUNTU-CVE-2023-40547

Affected: Ubuntu:14.04:LTS: shim, Ubuntu:14.04:LTS: shim-signed, Ubuntu:16.04:LTS: shim, Ubuntu:16.04:LTS: shim-signed, Ubuntu:18.04:LTS: shim, Ubuntu:18.04:LTS: shim-signed, Ubuntu:20.04:LTS: shim, Ubuntu:20.04:LTS: shim-signed, Ubuntu:22.04:LTS: shim, Ubuntu:22.04:LTS: shim-signed and 2 more

WID-SEC-W-2024-0326 — Linux "Shim": Schwachstelle ermöglicht Übernahme der Kontrolle

Ein anonymer Angreifer aus dem angrenzenden Netzwerk kann eine Schwachstelle in der "Shim" Komponente von Linux-Systemen ausnutzen, um die Kontrolle über ein betroffenes System zu übernehmen.