Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-40549

Опубликовано: 23 янв. 2024
Источник: redhat
CVSS3: 6.2
EPSS Низкий

Описание

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

Меры по смягчению последствий

There's no available mitigation for this issue.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2241797shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.2
ubuntu
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

CVSS3: 6.2
nvd
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

CVSS3: 5.5
msrc
6 месяцев назад

Описание отсутствует

CVSS3: 6.2
debian
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper ...

CVSS3: 6.2
github
больше 1 года назад

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

EPSS

Процентиль: 6%
0.00028
Низкий

6.2 Medium

CVSS3