TI-2023-21352 CVE-2023-40547 · GHSA-qjqj-4cq6-6f2f
Shim: rce in http boot support may lead to secure boot bypass
Priority MEDIUM 46
A remote code execution vulnerability was found in Shim.
Red Hat
Records7414All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical793CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9
Exploited now
Red Hat records in CISA KEVTI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability TI-2015-04610 ISC BIND Data Processing Errors Vulnerability TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability TI-2015-02874 Red Hat Libuser Race Condition Vulnerability TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records in Shim · all components
TI-2014-02993 CVE-2014-3676 · GHSA-pg7r-qqvh-q4vw
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via…
Priority MEDIUM 41
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
TI-2014-02994 CVE-2014-3677 · GHSA-mcwp-922h-789p
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a…
Priority LOW 38
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
TI-2022-11371 CVE-2022-28737 · GHSA-hmxr-46w2-jjwh
Out-of-bounds write in Red Hat Bootloader Team shim
Priority LOW 36
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded.
TI-2023-21353 CVE-2023-40548 · GHSA-7cf2-63mg-hv4j
Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
Priority LOW 35
A buffer overflow was found in Shim in the 32-bit system.
TI-2023-21354 CVE-2023-40549 · GHSA-86pm-fpxw-jjjc
Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
Priority LOW 28
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary.
TI-2023-21351 CVE-2023-40546 · GHSA-9fh5-955w-9jfh
Shim: out-of-bounds read printing error messages
Priority LOW 28
A flaw was found in Shim when an error happened while creating a new ESL variable.
TI-2014-02992 CVE-2014-3675 · GHSA-4w72-8qcf-2x8f
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
Priority LOW 28
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
TI-2023-21355 CVE-2023-40550 · GHSA-grx2-83w4-8647
Shim: out-of-bound read in verify_buffer_sbat()
Priority LOW 25
An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information.
TI-2023-21356 CVE-2023-40551 · GHSA-6j62-7qgg-9gww
Shim: out of bounds read when parsing mz binaries
Priority LOW 23
A flaw was found in the MZ binary format in Shim.