Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-40546

Опубликовано: 29 янв. 2024
Источник: nvd
CVSS3: 6.2
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*
Версия до 15.8 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-476
CWE-476

Связанные уязвимости

CVSS3: 6.2
ubuntu
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

CVSS3: 6.2
redhat
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

CVSS3: 5.5
msrc
6 месяцев назад

Описание отсутствует

CVSS3: 6.2
debian
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new E ...

CVSS3: 6.2
github
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-476
CWE-476