Red Hat Shim vulnerabilities
10 CVEs affecting Red Hat Shim, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40551, published 2024-01-29.
More from Red Hat.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2023-40547, published 2024-01-25. High severity, CVSS 8.3. EPSS: 5.4% chance of exploitation in the next 30 days. A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific…
- CVE-2014-3676, published 2014-10-22. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
- CVE-2014-3677, published 2014-10-22. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
- CVE-2014-3675, published 2014-10-22. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
- CVE-2023-40546, published 2024-01-29. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of…
- CVE-2023-40548, published 2024-01-29. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value…
- CVE-2023-40549, published 2024-01-29. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the…
- CVE-2023-40550, published 2024-01-29. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.
- CVE-2023-40551, published 2024-01-29. Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.
- CVE-2022-28737, published 2023-07-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to…