Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-40549

Опубликовано: 29 янв. 2024
Источник: nvd
CVSS3: 6.2
CVSS3: 5.5
EPSS Низкий

Описание

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*
Версия до 15.8 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 6.2
ubuntu
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

CVSS3: 6.2
redhat
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

CVSS3: 5.5
msrc
6 месяцев назад

Описание отсутствует

CVSS3: 6.2
debian
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper ...

CVSS3: 6.2
github
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125
CWE-125