CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40548

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 8.5%

CVSS Severity

CVSS v3 Score 7.4

References

Products affected by CVE-2023-40548

Redhat » Shim » Version: N/A

cpe:2.3:a:redhat:shim:-
Redhat » Shim » Version: 0.3

cpe:2.3:a:redhat:shim:0.3
Redhat » Shim » Version: 0.4

cpe:2.3:a:redhat:shim:0.4
Redhat » Shim » Version: 0.5

cpe:2.3:a:redhat:shim:0.5
Redhat » Shim » Version: 0.7

cpe:2.3:a:redhat:shim:0.7
Redhat » Shim » Version: 0.8

cpe:2.3:a:redhat:shim:0.8
Redhat » Shim » Version: 0.9

cpe:2.3:a:redhat:shim:0.9
Redhat » Shim » Version: 1.0.4

cpe:2.3:a:redhat:shim:1.0.4
Redhat » Shim » Version: 1.0.5

cpe:2.3:a:redhat:shim:1.0.5
Redhat » Shim » Version: 1.0.6

cpe:2.3:a:redhat:shim:1.0.6
Redhat » Shim » Version: 1.0.7

cpe:2.3:a:redhat:shim:1.0.7
Redhat » Shim » Version: 1.0.8

cpe:2.3:a:redhat:shim:1.0.8
Redhat » Shim » Version: 1.0.9

cpe:2.3:a:redhat:shim:1.0.9
Redhat » Shim » Version: 1.1.0

cpe:2.3:a:redhat:shim:1.1.0
Redhat » Shim » Version: 1.1.1

cpe:2.3:a:redhat:shim:1.1.1
Redhat » Shim » Version: 10

cpe:2.3:a:redhat:shim:10
Redhat » Shim » Version: 11

cpe:2.3:a:redhat:shim:11
Redhat » Shim » Version: 12

cpe:2.3:a:redhat:shim:12
Redhat » Shim » Version: 13

cpe:2.3:a:redhat:shim:13
Redhat » Shim » Version: 14

cpe:2.3:a:redhat:shim:14
Redhat » Shim » Version: 15

cpe:2.3:a:redhat:shim:15
Redhat » Shim » Version: 15.1

cpe:2.3:a:redhat:shim:15.1
Redhat » Shim » Version: 15.2

cpe:2.3:a:redhat:shim:15.2
Redhat » Shim » Version: 15.3

cpe:2.3:a:redhat:shim:15.3
Redhat » Shim » Version: 15.4

cpe:2.3:a:redhat:shim:15.4
Redhat » Shim » Version: 15.5

cpe:2.3:a:redhat:shim:15.5
Redhat » Shim » Version: 15.6

cpe:2.3:a:redhat:shim:15.6
Redhat » Shim » Version: 15.7

cpe:2.3:a:redhat:shim:15.7
Redhat » Shim » Version: 15.8

cpe:2.3:a:redhat:shim:15.8
Fedoraproject » Fedora » Version: 39

cpe:2.3:o:fedoraproject:fedora:39

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40548

Products

Pricing

Contact Us