CVE-2023-5342
Shim: expired secure boot certificate
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Shim: expired secure boot certificate
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.
- Record
CVE-2023-5342- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-324
- Updated
- 2026-11-02
EUVDEUVD-2023-57659
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.
- Record
EUVD-2023-57659- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-pj5r-f4h5-qprv
Rejected reason: The original vulnerability was not valid.
Rejected reason: The original vulnerability was not valid.
- Record
GHSA-pj5r-f4h5-qprv- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-324
- Updated
- 2026-11-02
NVD
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.
- Record
CVE-2023-5342- CVSS 3.1
- 4.1 Medium
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-324
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-5342 is a medium vulnerability (CVSS 4.1) in Red Hat Enterprise Linux 10, published August 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.09%, the 0th percentile. No source names a fixed version.