CVE-2023-40550 in shim

Riassunto

di MITRE • 29/01/2024

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Red Hat, Inc.
• Prenotare: 15/08/2023
• Divulgazione: 29/01/2024
• Moderazione: accettato
• Voce: VDB-251930
• CPE: pronto
• CWE: CWE-125 (confermato)
• CVSS: 5.5 (NVD)
• EPSS: 0.00394
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-40550
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-40550
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-40550/