Every CVESearch/Get API key

CVE-2023-40546

Shim: out-of-bounds read printing error messages

6.2 MediumFix available

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.44%Up 0.4 points since Jan 31, 2024
90%50%10%1%

What each source reports

CVE List Score used6.2

Shim: out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2023-451176.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
EUVD-2023-45117
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-9fh5-955w-9jfh6.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails...

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
GHSA-9fh5-955w-9jfh
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD6.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVAZL-339845.5

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-1

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-33984
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-341575.5

CVE-2023-40546 affecting package shim for versions less than 15.8-1

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-34157
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVAZL-352535.5

CVE-2023-40546 affecting package shim for versions less than 15.8-3

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-35253
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-352615.5

CVE-2023-40546 affecting package shim-unsigned-aarch64 for versions less than 15.8-3

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-35261
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-352715.5

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-3

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-35271
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-405465.5
Record
BELL-CVE-2023-40546
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV6.2

Shim: out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVDEBIAN-CVE-2023-405465.5

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
DEBIAN-CVE-2023-40546
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-18005.5

shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments.

Security Fix(es):

A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirror_one_esl of the file mok.c of the component mok. Applying the patch 66e6579dbf921152f647a0c16da1d3b2f40861ca is able to eliminate this problem. The bugfix is ready for download at github.com.(CVE-2023-40546)

Record
OESA-2023-1800
CVSS 3.1
5.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-18015.5

shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments.

Security Fix(es):

A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirror_one_esl of the file mok.c of the component mok. Applying the patch 66e6579dbf921152f647a0c16da1d3b2f40861ca is able to eliminate this problem. The bugfix is ready for download at github.com.(CVE-2023-40546)

Record
OESA-2023-1801
CVSS 3.1
5.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-18385.5

shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments.

Security Fix(es):

A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirror_one_esl of the file mok.c of the component mok. Applying the patch 66e6579dbf921152f647a0c16da1d3b2f40861ca is able to eliminate this problem. The bugfix is ready for download at github.com.(CVE-2023-40546)

Record
OESA-2023-1838
CVSS 3.1
5.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:18348.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1834
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:18358.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1835
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:18738.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1873
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:18768.3

Red Hat Security Advisory: shim bug fix update

Record
RHSA-2024:1876
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:18838.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1883
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:19028.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1902
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:19038.3

Red Hat Security Advisory: shim bug fix update

Record
RHSA-2024:1903
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:19598.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1959
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:20868.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:2086
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-405466.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
UBUNTU-CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:1902No score

Important: shim security update

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

Security Fix(es):

  • shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)
  • shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (CVE-2023-40548)
  • shim: Out-of-bounds read printing error messages (CVE-2023-40546)
  • shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file (CVE-2023-40549)
  • shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)
  • shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1902
Updated
2026-11-02
OSVALSA-2024:1903No score

Important: shim bug fix update

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

Security Fix(es):

  • shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)
  • shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (CVE-2023-40548)
  • shim: Out-of-bounds read printing error messages (CVE-2023-40546)
  • shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file (CVE-2023-40549)
  • shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)
  • shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1903
Updated
2026-11-02
OSVCLSA-2024-1711036007No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1711036007
Updated
2026-11-02
OSVCLSA-2024-1711036383No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1711036383
Updated
2026-11-02
OSVCLSA-2024-1721204645No score

shim-signed: Fix of 4 CVEs

  • Make this package installable on a system having a either Centos or Cloudlinux signed kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1721204645
Updated
2026-11-02
OSVCLSA-2024-1724271309No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1724271309
Updated
2026-11-02
OSVCLSA-2025-1742806677No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having a either Almalinux or Cloudlinux signed kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2025-1742806677
Updated
2026-11-02
OSVSUSE-SU-2024:1368-1No score

Security update for shim

This update for shim fixes the following issues:

  • Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  • Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

  • Generate dbx during build so we don't include binary files in sources

  • Don't require grub so shim can still be used with systemd-boot

  • Update shim-install to fix boot failure of ext4 root file system on RAID10 (bsc#1205855)

  • Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade

  • Update shim-install to amend full disk encryption support

    • Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
    • Use the long name to specify the grub2 key protector
    • cryptodisk: support TPM authorized policies
    • Do not use tpm_record_pcrs unless the command is in command.lst

  • Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)

Record
SUSE-SU-2024:1368-1
Updated
2026-11-02
OSVSUSE-SU-2024:1461-1No score

Security update for shim

This update for shim fixes the following issues:

  • Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  • Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

  • Generate dbx during build so we don't include binary files in sources

  • Don't require grub so shim can still be used with systemd-boot

  • Update shim-install to fix boot failure of ext4 root file system on RAID10 (bsc#1205855)

  • Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade

  • Update shim-install to amend full disk encryption support

    • Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
    • Use the long name to specify the grub2 key protector
    • cryptodisk: support TPM authorized policies
    • Do not use tpm_record_pcrs unless the command is in command.lst

  • Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)

Record
SUSE-SU-2024:1461-1
Updated
2026-11-02
OSVSUSE-SU-2024:1462-1No score

Security update for shim

This update for shim fixes the following issues:

  • Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  • Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

  • Generate dbx during build so we don't include binary files in sources

  • Don't require grub so shim can still be used with systemd-boot

  • Update shim-install to fix boot failure of ext4 root file system on RAID10 (bsc#1205855)

  • Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade

  • Update shim-install to amend full disk encryption support

    • Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
    • Use the long name to specify the grub2 key protector
    • cryptodisk: support TPM authorized policies
    • Do not use tpm_record_pcrs unless the command is in command.lst

  • Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)

Record
SUSE-SU-2024:1462-1
Updated
2026-11-02
OSVSUSE-SU-2025:20136-1No score

Security update for pcr-oracle, shim

This update for pcr-oracle, shim fixes the following issues:

pcr-oracle:

  • predict SbatLevelRT for the next boot (bsc#1230316)

shim was updated to version 15.8:

  • Update shim-install to use the 'removable' way for encrypted SL-Micro images (bsc#1230316)
    • Always use the removable way for SL-Micro
    • Limit the removable option to encrypted SL-Micro

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)
Record
SUSE-SU-2025:20136-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
shim-aa64
AlmaLinux:8
From an advisory covering 6 CVEs
before 15.8-4.el8_9.alma.1
15.8-4.el8_9.alma.1
shim-ia32
AlmaLinux:8
From an advisory covering 6 CVEs
before 15.8-4.el8_9.alma.1
15.8-4.el8_9.alma.1
shim-x64
AlmaLinux:8
From an advisory covering 6 CVEs
before 15.8-4.el8_9.alma.1
15.8-4.el8_9.alma.1
shim-aa64
AlmaLinux:9
From an advisory covering 6 CVEs
before 15.8-4.el9_3.alma.1
15.8-4.el9_3.alma.1
shim-x64
AlmaLinux:9
From an advisory covering 6 CVEs
before 15.8-4.el9_3.alma.1
15.8-4.el9_3.alma.1
shim-unsigned-x64
Azure Linux:2
before 15.8-1
15.8-1
shim
Azure Linux:2
before 15.8-1
15.8-1
shim
Azure Linux:3
before 15.8-3
15.8-3
shim-unsigned-aarch64
Azure Linux:3
before 15.8-3
15.8-3
shim-unsigned-x64
Azure Linux:3
before 15.8-3
15.8-3
Show 125 moreShow less
Affected packages
PackageAffectedFixed
shim
Alpaquita:23
15.7-r0 up to 15.8-r0
15.8-r0
shim-signed
Alpaquita:23
15.7-r0 and laterNone known
shim
Alpaquita:stream
15.7-r0 up to 15.8-r0
15.8-r0
shim-signed
Alpaquita:stream
15.7-r0 and laterNone known
shim-ia32
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
shim-x64
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
shim-ia32
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
shim-x64
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
mokutil
TuxCare:CentOS:7
From an advisory covering 4 CVEs
before 15.8-1.el7.tuxcare.els1
15.8-1.el7.tuxcare.els1
shim-ia32
TuxCare:CentOS:7
From an advisory covering 4 CVEs
before 15.8-1.el7.tuxcare.els1
15.8-1.el7.tuxcare.els1
shim-x64
TuxCare:CentOS:7
From an advisory covering 4 CVEs
before 15.8-1.el7.tuxcare.els1
15.8-1.el7.tuxcare.els1
shim-ia32
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 15.8-1.el8_2.tuxcare.els1
15.8-1.el8_2.tuxcare.els1
shim-x64
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 15.8-1.el8_2.tuxcare.els1
15.8-1.el8_2.tuxcare.els1
shim-x64
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
before 15.8-1.el9.alma.1.tuxcare.els1
15.8-1.el9.alma.1.tuxcare.els1
shim
Debian:12
before 15.8-1~deb12u1, plus listed versions
15.7-115.8-1~deb10u115.8-1~deb11u1
15.8-1~deb12u1
shim
Debian:13
before 15.8-1
15.8-1
shim
Debian:14
before 15.8-1
15.8-1
shim
Debian:10
From an advisory covering 6 CVEs
before 15.8-1~deb10u1, plus listed versions
15+1533136590.3beb971-1015+1533136590.3beb971-715+1533136590.3beb971-7+deb10u115+1533136590.3beb971-815+1533136590.3beb971-9
Show 25 moreShow less
15.3-115.3-1~deb10u115.3-1~deb10u215.3-1~deb10u315.3-215.3-315.4-115.4-1~deb10u115.4-215.4-2~deb10u115.4-315.4-3~deb10u115.4-415.4-515.4-5~deb10u115.4-615.4-6~deb10u115.4-715.4-7~deb10u115.6-115.6-1~deb10u115.6-1~deb11u115.7-115.7-1~deb10u115.7-1~deb11u1
15.8-1~deb10u1
shim
openEuler:22.03-LTS
before 15.4-10.oe2203
15.4-10.oe2203
shim
openEuler:22.03-LTS-SP1
before 15.6-12.oe2203sp1
15.6-12.oe2203sp1
shim
openEuler:22.03-LTS-SP2
before 15.6-12.oe2203sp2
15.6-12.oe2203sp2
shim
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-ia32
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-x64
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim
Red Hat:rhel_e4s:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-ia32
Red Hat:rhel_e4s:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-x64
Red Hat:rhel_e4s:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim
Red Hat:rhel_tus:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-ia32
Red Hat:rhel_tus:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-x64
Red Hat:rhel_tus:8.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-unsigned-aarch64
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 6 CVEs
before 0:15.8-2.el9
0:15.8-2.el9
shim
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 6 CVEs
before 0:15.8-3.el9
0:15.8-3.el9
shim-aa64
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 6 CVEs
before 0:15.8-3.el9
0:15.8-3.el9
shim-x64
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 6 CVEs
before 0:15.8-3.el9
0:15.8-3.el9
shim-unsigned-x64
Red Hat:rhel_eus:9.0::crb
From an advisory covering 6 CVEs
before 0:15.8-2.el9
0:15.8-2.el9
shim
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-ia32
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-x64
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-ia32
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-x64
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-ia32
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-x64
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-3.el9_2
0:15.8-3.el9_2
shim-aa64
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-3.el9_2
0:15.8-3.el9_2
shim-x64
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 6 CVEs
before 0:15.8-3.el9_2
0:15.8-3.el9_2
shim
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8
0:15.8-2.el8
shim-aa64
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8
0:15.8-2.el8
shim-ia32
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8
0:15.8-2.el8
shim-x64
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8
0:15.8-2.el8
shim-unsigned-x64
Red Hat:rhel_eus:8.8::crb
From an advisory covering 6 CVEs
before 0:15.8-2.el8
0:15.8-2.el8
shim
Red Hat:enterprise_linux:8::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim-aa64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim-ia32
Red Hat:enterprise_linux:8::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim-x64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el9_3
0:15.8-4.el9_3
shim-aa64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el9_3
0:15.8-4.el9_3
shim-x64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
before 0:15.8-4.el9_3
0:15.8-4.el9_3
mokutil
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
mokutil-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-ia32
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim-signed
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim-unsigned-ia32
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-unsigned-x64
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-x64
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
mokutil
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
mokutil-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-ia32
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim-signed
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim-unsigned-ia32
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-unsigned-x64
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-x64
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
mokutil
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
mokutil-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-ia32
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim-signed
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim-unsigned-ia32
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-unsigned-x64
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-3.el7
0:15.8-3.el7
shim-x64
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim-aa64
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim-ia32
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim-x64
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 6 CVEs
before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Manager Proxy 4.3
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Manager Server 4.3
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Enterprise Storage 7.1
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
openSUSE:Leap Micro 5.3
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
openSUSE:Leap Micro 5.4
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
openSUSE:Leap 15.5
From an advisory covering 7 CVEs
before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 7 CVEs
before 15.8-150100.3.38.1
15.8-150100.3.38.1
shim
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 7 CVEs
before 15.8-150100.3.38.1
15.8-150100.3.38.1
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 7 CVEs
before 15.8-150100.3.38.1
15.8-150100.3.38.1
shim
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
before 15.8-25.30.1
15.8-25.30.1
shim
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
before 15.8-25.30.1
15.8-25.30.1
pcr-oracle
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
before 0.4.6-2.1
0.4.6-2.1
shim
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
before 15.8-1.1
15.8-1.1
shim
Ubuntu:14.04:LTS
All versions, plus listed versions
0.4-0ubuntu40.8-0ubuntu20.9+1474479173.6c180c6-1ubuntu113-0ubuntu2
None known
shim-signed
Ubuntu:14.04:LTS
All versions, plus listed versions
1.31.41.51.61.9
Show 8 moreShow less
1.17~14.04.11.18~14.04.11.19~14.04.11.32~14.04.21.33.1~14.04.21.33.1~14.04.31.33.1~14.04.41.33.1~14.04.5
None known
shim
Ubuntu:16.04:LTS
All versions, plus listed versions
0.8-0ubuntu20.9+1474479173.6c180c6-1ubuntu113-0ubuntu215+1533136590.3beb971-0ubuntu115+1552672080.a4a1fbe-0ubuntu215.4-0ubuntu7
None known
shim-signed
Ubuntu:16.04:LTS
All versions, plus listed versions
1.111.121.17~16.04.11.18~16.04.11.19~16.04.1
Show 10 moreShow less
1.27~16.04.11.28~16.04.11.32~16.04.11.33.1~16.04.11.33.1~16.04.21.33.1~16.04.31.33.1~16.04.41.33.1~16.04.51.33.1~16.04.61.33.1~16.04.10
None known
shim
Ubuntu:18.04:LTS
All versions, plus listed versions
0.9+1474479173.6c180c6-1ubuntu113-0ubuntu215+1533136590.3beb971-0ubuntu115+1552672080.a4a1fbe-0ubuntu215.4-0ubuntu715.4-0ubuntu915.7-0ubuntu1
None known
shim-signed
Ubuntu:18.04:LTS
All versions, plus listed versions
1.321.33.11.34.41.34.51.34.6
Show 13 moreShow less
1.34.71.34.81.34.91.34.9.11.34.9.21.37~18.04.11.37~18.04.21.37~18.04.31.37~18.04.61.37~18.04.81.37~18.04.101.37~18.04.111.37~18.04.13
None known
shim
Ubuntu:20.04:LTS
before 15.8-0ubuntu1, plus listed versions
15+1533136590.3beb971-0ubuntu115+1552672080.a4a1fbe-0ubuntu115+1552672080.a4a1fbe-0ubuntu215.4-0ubuntu715.4-0ubuntu915.7-0ubuntu1
15.8-0ubuntu1
shim-signed
Ubuntu:20.04:LTS
before 1.40.10, plus listed versions
1.391.401.40.31.40.41.40.61.40.71.40.9
1.40.10
shim
Ubuntu:22.04:LTS
before 15.8-0ubuntu1, plus listed versions
15.4-0ubuntu915.7-0ubuntu1
15.8-0ubuntu1
shim-signed
Ubuntu:22.04:LTS
before 1.51.4, plus listed versions
1.511.51.3
1.51.4
shim
Ubuntu:24.04:LTS
before 15.8-0ubuntu1, plus listed versions
15.7-0ubuntu1
15.8-0ubuntu1
shim-signed
Ubuntu:24.04:LTS
before 1.58, plus listed versions
1.561.57
1.58

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-40546 is a medium vulnerability (CVSS 6.2) in Redhat Shim, published November 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in shim-unsigned-x64 15.8-1.

References

Show 88 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open