Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-40546

Опубликовано: 23 янв. 2024
Источник: redhat
CVSS3: 6.2
EPSS Низкий

Описание

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Меры по смягчению последствий

There's no available mitigation for this issue.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2241796shim: Out-of-bounds read printing error messages

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.2
ubuntu
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

CVSS3: 6.2
nvd
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

CVSS3: 5.5
msrc
8 месяцев назад

Описание отсутствует

CVSS3: 6.2
debian
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new E ...

CVSS3: 6.2
github
больше 1 года назад

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3