CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40547

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise. This flaw is only exploitable during the early boot phase, an attacker needs to perform a Man-in-the-Middle or compromise the boot server to be able to exploit this vulnerability successfully.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.042

EPSS Ranking 88.2%

CVSS Severity

CVSS v3 Score 8.3

References

Products affected by CVE-2023-40547

Redhat » Shim » Version: N/A

cpe:2.3:a:redhat:shim:-
Redhat » Shim » Version: 0.3

cpe:2.3:a:redhat:shim:0.3
Redhat » Shim » Version: 0.4

cpe:2.3:a:redhat:shim:0.4
Redhat » Shim » Version: 0.5

cpe:2.3:a:redhat:shim:0.5
Redhat » Shim » Version: 0.7

cpe:2.3:a:redhat:shim:0.7
Redhat » Shim » Version: 0.8

cpe:2.3:a:redhat:shim:0.8
Redhat » Shim » Version: 0.9

cpe:2.3:a:redhat:shim:0.9
Redhat » Shim » Version: 1.0.4

cpe:2.3:a:redhat:shim:1.0.4
Redhat » Shim » Version: 1.0.5

cpe:2.3:a:redhat:shim:1.0.5
Redhat » Shim » Version: 1.0.6

cpe:2.3:a:redhat:shim:1.0.6
Redhat » Shim » Version: 1.0.7

cpe:2.3:a:redhat:shim:1.0.7
Redhat » Shim » Version: 1.0.8

cpe:2.3:a:redhat:shim:1.0.8
Redhat » Shim » Version: 1.0.9

cpe:2.3:a:redhat:shim:1.0.9
Redhat » Shim » Version: 1.1.0

cpe:2.3:a:redhat:shim:1.1.0
Redhat » Shim » Version: 1.1.1

cpe:2.3:a:redhat:shim:1.1.1
Redhat » Shim » Version: 10

cpe:2.3:a:redhat:shim:10
Redhat » Shim » Version: 11

cpe:2.3:a:redhat:shim:11
Redhat » Shim » Version: 12

cpe:2.3:a:redhat:shim:12
Redhat » Shim » Version: 13

cpe:2.3:a:redhat:shim:13
Redhat » Shim » Version: 14

cpe:2.3:a:redhat:shim:14
Redhat » Shim » Version: 15

cpe:2.3:a:redhat:shim:15
Redhat » Shim » Version: 15.1

cpe:2.3:a:redhat:shim:15.1
Redhat » Shim » Version: 15.2

cpe:2.3:a:redhat:shim:15.2
Redhat » Shim » Version: 15.3

cpe:2.3:a:redhat:shim:15.3
Redhat » Shim » Version: 15.4

cpe:2.3:a:redhat:shim:15.4
Redhat » Shim » Version: 15.5

cpe:2.3:a:redhat:shim:15.5
Redhat » Shim » Version: 15.6

cpe:2.3:a:redhat:shim:15.6
Redhat » Shim » Version: 15.7

cpe:2.3:a:redhat:shim:15.7
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux » Version: 9.0

cpe:2.3:o:redhat:enterprise_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40547

Products

Pricing

Contact Us