Every CVE Search/ Get API key

CVE-2023-40546

Shim: out-of-bounds read printing error messages

6.2 MediumFix available

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.44%Up 0.4 points since Jan 31, 2024
90%50%10%1%

What each source reports

CVE List Score used 6.2

Shim: out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2023-45117 6.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
EUVD-2023-45117
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-9fh5-955w-9jfh 6.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails...

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
GHSA-9fh5-955w-9jfh
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD 6.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVAZL-33984 5.5

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-1

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-33984
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34157 5.5

CVE-2023-40546 affecting package shim for versions less than 15.8-1

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-34157
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVAZL-35253 5.5

CVE-2023-40546 affecting package shim for versions less than 15.8-3

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-35253
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-35261 5.5

CVE-2023-40546 affecting package shim-unsigned-aarch64 for versions less than 15.8-3

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-35261
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-35271 5.5

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-3

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
AZL-35271
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-40546 5.5
Record
BELL-CVE-2023-40546
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.2

Shim: out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVDEBIAN-CVE-2023-40546 5.5

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
DEBIAN-CVE-2023-40546
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1800 5.5

shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments.

Security Fix(es):

A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirror_one_esl of the file mok.c of the component mok. Applying the patch 66e6579dbf921152f647a0c16da1d3b2f40861ca is able to eliminate this problem. The bugfix is ready for download at github.com.(CVE-2023-40546)

Record
OESA-2023-1800
CVSS 3.1
5.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-1801 5.5

shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments.

Security Fix(es):

A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirror_one_esl of the file mok.c of the component mok. Applying the patch 66e6579dbf921152f647a0c16da1d3b2f40861ca is able to eliminate this problem. The bugfix is ready for download at github.com.(CVE-2023-40546)

Record
OESA-2023-1801
CVSS 3.1
5.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-1838 5.5

shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments.

Security Fix(es):

A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirror_one_esl of the file mok.c of the component mok. Applying the patch 66e6579dbf921152f647a0c16da1d3b2f40861ca is able to eliminate this problem. The bugfix is ready for download at github.com.(CVE-2023-40546)

Record
OESA-2023-1838
CVSS 3.1
5.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:1834 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1834
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1835 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1835
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1873 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1873
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1876 8.3

Red Hat Security Advisory: shim bug fix update

Record
RHSA-2024:1876
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1883 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1883
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1902 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1902
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1903 8.3

Red Hat Security Advisory: shim bug fix update

Record
RHSA-2024:1903
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1959 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:1959
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2086 8.3

Red Hat Security Advisory: shim security update

Record
RHSA-2024:2086
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-40546 6.2

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Record
UBUNTU-CVE-2023-40546
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:1902 No score

Important: shim security update

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

Security Fix(es):

  • shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)
  • shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (CVE-2023-40548)
  • shim: Out-of-bounds read printing error messages (CVE-2023-40546)
  • shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file (CVE-2023-40549)
  • shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)
  • shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1902
Updated
2026-11-02
OSVALSA-2024:1903 No score

Important: shim bug fix update

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

Security Fix(es):

  • shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)
  • shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems (CVE-2023-40548)
  • shim: Out-of-bounds read printing error messages (CVE-2023-40546)
  • shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file (CVE-2023-40549)
  • shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)
  • shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1903
Updated
2026-11-02
OSVCLSA-2024-1711036007 No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1711036007
Updated
2026-11-02
OSVCLSA-2024-1711036383 No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1711036383
Updated
2026-11-02
OSVCLSA-2024-1721204645 No score

shim-signed: Fix of 4 CVEs

  • Make this package installable on a system having a either Centos or Cloudlinux signed kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1721204645
Updated
2026-11-02
OSVCLSA-2024-1724271309 No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2024-1724271309
Updated
2026-11-02
OSVCLSA-2025-1742806677 No score

shim: Fix of 4 CVEs

  • Make this package installable only on a system having a either Almalinux or Cloudlinux signed kernel
  • Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551
Record
CLSA-2025-1742806677
Updated
2026-11-02
OSVSUSE-SU-2024:1368-1 No score

Security update for shim

This update for shim fixes the following issues:

  • Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  • Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

  • Generate dbx during build so we don't include binary files in sources

  • Don't require grub so shim can still be used with systemd-boot

  • Update shim-install to fix boot failure of ext4 root file system on RAID10 (bsc#1205855)

  • Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade

  • Update shim-install to amend full disk encryption support

    • Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
    • Use the long name to specify the grub2 key protector
    • cryptodisk: support TPM authorized policies
    • Do not use tpm_record_pcrs unless the command is in command.lst

  • Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)

Record
SUSE-SU-2024:1368-1
Updated
2026-11-02
OSVSUSE-SU-2024:1461-1 No score

Security update for shim

This update for shim fixes the following issues:

  • Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  • Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

  • Generate dbx during build so we don't include binary files in sources

  • Don't require grub so shim can still be used with systemd-boot

  • Update shim-install to fix boot failure of ext4 root file system on RAID10 (bsc#1205855)

  • Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade

  • Update shim-install to amend full disk encryption support

    • Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
    • Use the long name to specify the grub2 key protector
    • cryptodisk: support TPM authorized policies
    • Do not use tpm_record_pcrs unless the command is in command.lst

  • Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)

Record
SUSE-SU-2024:1461-1
Updated
2026-11-02
OSVSUSE-SU-2024:1462-1 No score

Security update for shim

This update for shim fixes the following issues:

  • Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  • Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

  • Generate dbx during build so we don't include binary files in sources

  • Don't require grub so shim can still be used with systemd-boot

  • Update shim-install to fix boot failure of ext4 root file system on RAID10 (bsc#1205855)

  • Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade

  • Update shim-install to amend full disk encryption support

    • Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
    • Use the long name to specify the grub2 key protector
    • cryptodisk: support TPM authorized policies
    • Do not use tpm_record_pcrs unless the command is in command.lst

  • Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)

Record
SUSE-SU-2024:1462-1
Updated
2026-11-02
OSVSUSE-SU-2025:20136-1 No score

Security update for pcr-oracle, shim

This update for pcr-oracle, shim fixes the following issues:

pcr-oracle:

  • predict SbatLevelRT for the next boot (bsc#1230316)

shim was updated to version 15.8:

  • Update shim-install to use the 'removable' way for encrypted SL-Micro images (bsc#1230316)
    • Always use the removable way for SL-Micro
    • Limit the removable option to encrypted SL-Micro

Security issues fixed:

  • mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
  • avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
  • Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
  • Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
  • pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
  • pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)
Record
SUSE-SU-2025:20136-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
shim-aa64
AlmaLinux:8
 before 15.8-4.el8_9.alma.1
15.8-4.el8_9.alma.1
shim-ia32
AlmaLinux:8
 before 15.8-4.el8_9.alma.1
15.8-4.el8_9.alma.1
shim-x64
AlmaLinux:8
 before 15.8-4.el8_9.alma.1
15.8-4.el8_9.alma.1
shim-aa64
AlmaLinux:9
 before 15.8-4.el9_3.alma.1
15.8-4.el9_3.alma.1
shim-x64
AlmaLinux:9
 before 15.8-4.el9_3.alma.1
15.8-4.el9_3.alma.1
shim-unsigned-x64
Azure Linux:2
 before 15.8-1
15.8-1
shim
Azure Linux:2
 before 15.8-1
15.8-1
shim
Azure Linux:3
 before 15.8-3
15.8-3
shim-unsigned-aarch64
Azure Linux:3
 before 15.8-3
15.8-3
shim-unsigned-x64
Azure Linux:3
 before 15.8-3
15.8-3
Show 125 moreShow less
Affected packages
PackageAffectedFixed
shim
Alpaquita:23
 15.7-r0 up to 15.8-r0
15.8-r0
shim-signed
Alpaquita:23
 15.7-r0 and later None known
shim
Alpaquita:stream
 15.7-r0 up to 15.8-r0
15.8-r0
shim-signed
Alpaquita:stream
 15.7-r0 and later None known
shim-ia32
TuxCare:CentOS:8.4
 before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
shim-x64
TuxCare:CentOS:8.4
 before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
shim-ia32
TuxCare:CentOS:8.5
 before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
shim-x64
TuxCare:CentOS:8.5
 before 15.8-1.el8.tuxcare.els1
15.8-1.el8.tuxcare.els1
mokutil
TuxCare:CentOS:7
 before 15.8-1.el7.tuxcare.els1
15.8-1.el7.tuxcare.els1
shim-ia32
TuxCare:CentOS:7
 before 15.8-1.el7.tuxcare.els1
15.8-1.el7.tuxcare.els1
shim-x64
TuxCare:CentOS:7
 before 15.8-1.el7.tuxcare.els1
15.8-1.el7.tuxcare.els1
shim-ia32
TuxCare:CentOS-Stream:8
 before 15.8-1.el8_2.tuxcare.els1
15.8-1.el8_2.tuxcare.els1
shim-x64
TuxCare:CentOS-Stream:8
 before 15.8-1.el8_2.tuxcare.els1
15.8-1.el8_2.tuxcare.els1
shim-x64
TuxCare:AlmaLinux:9.2
 before 15.8-1.el9.alma.1.tuxcare.els1
15.8-1.el9.alma.1.tuxcare.els1
shim
Debian:12
 before 15.8-1~deb12u1, plus listed versions
15.7-115.8-1~deb10u115.8-1~deb11u1
15.8-1~deb12u1
shim
Debian:13
 before 15.8-1
15.8-1
shim
Debian:14
 before 15.8-1
15.8-1
shim
Debian:10
 before 15.8-1~deb10u1, plus listed versions
15+1533136590.3beb971-1015+1533136590.3beb971-715+1533136590.3beb971-7+deb10u115+1533136590.3beb971-815+1533136590.3beb971-9
Show 25 moreShow less
15.3-115.3-1~deb10u115.3-1~deb10u215.3-1~deb10u315.3-215.3-315.4-115.4-1~deb10u115.4-215.4-2~deb10u115.4-315.4-3~deb10u115.4-415.4-515.4-5~deb10u115.4-615.4-6~deb10u115.4-715.4-7~deb10u115.6-115.6-1~deb10u115.6-1~deb11u115.7-115.7-1~deb10u115.7-1~deb11u1
15.8-1~deb10u1
shim
openEuler:22.03-LTS
 before 15.4-10.oe2203
15.4-10.oe2203
shim
openEuler:22.03-LTS-SP1
 before 15.6-12.oe2203sp1
15.6-12.oe2203sp1
shim
openEuler:22.03-LTS-SP2
 before 15.6-12.oe2203sp2
15.6-12.oe2203sp2
shim
Red Hat:rhel_aus:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-ia32
Red Hat:rhel_aus:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-x64
Red Hat:rhel_aus:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim
Red Hat:rhel_e4s:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-ia32
Red Hat:rhel_e4s:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-x64
Red Hat:rhel_e4s:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim
Red Hat:rhel_tus:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-ia32
Red Hat:rhel_tus:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-x64
Red Hat:rhel_tus:8.2::baseos
 before 0:15.8-2.el8_2
0:15.8-2.el8_2
shim-unsigned-aarch64
Red Hat:rhel_eus:9.0::appstream
 before 0:15.8-2.el9
0:15.8-2.el9
shim
Red Hat:rhel_eus:9.0::baseos
 before 0:15.8-3.el9
0:15.8-3.el9
shim-aa64
Red Hat:rhel_eus:9.0::baseos
 before 0:15.8-3.el9
0:15.8-3.el9
shim-x64
Red Hat:rhel_eus:9.0::baseos
 before 0:15.8-3.el9
0:15.8-3.el9
shim-unsigned-x64
Red Hat:rhel_eus:9.0::crb
 before 0:15.8-2.el9
0:15.8-2.el9
shim
Red Hat:rhel_aus:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-ia32
Red Hat:rhel_aus:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-x64
Red Hat:rhel_aus:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim
Red Hat:rhel_e4s:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-ia32
Red Hat:rhel_e4s:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-x64
Red Hat:rhel_e4s:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim
Red Hat:rhel_tus:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-ia32
Red Hat:rhel_tus:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim-x64
Red Hat:rhel_tus:8.4::baseos
 before 0:15.8-2.el8_4
0:15.8-2.el8_4
shim
Red Hat:rhel_eus:9.2::baseos
 before 0:15.8-3.el9_2
0:15.8-3.el9_2
shim-aa64
Red Hat:rhel_eus:9.2::baseos
 before 0:15.8-3.el9_2
0:15.8-3.el9_2
shim-x64
Red Hat:rhel_eus:9.2::baseos
 before 0:15.8-3.el9_2
0:15.8-3.el9_2
shim
Red Hat:rhel_eus:8.8::baseos
 before 0:15.8-2.el8
0:15.8-2.el8
shim-aa64
Red Hat:rhel_eus:8.8::baseos
 before 0:15.8-2.el8
0:15.8-2.el8
shim-ia32
Red Hat:rhel_eus:8.8::baseos
 before 0:15.8-2.el8
0:15.8-2.el8
shim-x64
Red Hat:rhel_eus:8.8::baseos
 before 0:15.8-2.el8
0:15.8-2.el8
shim-unsigned-x64
Red Hat:rhel_eus:8.8::crb
 before 0:15.8-2.el8
0:15.8-2.el8
shim
Red Hat:enterprise_linux:8::baseos
 before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim-aa64
Red Hat:enterprise_linux:8::baseos
 before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim-ia32
Red Hat:enterprise_linux:8::baseos
 before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim-x64
Red Hat:enterprise_linux:8::baseos
 before 0:15.8-4.el8_9
0:15.8-4.el8_9
shim
Red Hat:enterprise_linux:9::baseos
 before 0:15.8-4.el9_3
0:15.8-4.el9_3
shim-aa64
Red Hat:enterprise_linux:9::baseos
 before 0:15.8-4.el9_3
0:15.8-4.el9_3
shim-x64
Red Hat:enterprise_linux:9::baseos
 before 0:15.8-4.el9_3
0:15.8-4.el9_3
mokutil
Red Hat:enterprise_linux:7::client
 before 0:15.8-1.el7
0:15.8-1.el7
mokutil-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:enterprise_linux:7::client
 before 0:15.8-3.el7
0:15.8-3.el7
shim-ia32
Red Hat:enterprise_linux:7::client
 before 0:15.8-1.el7
0:15.8-1.el7
shim-signed
Red Hat:enterprise_linux:7::client
 before 0:15.8-1.el7
0:15.8-1.el7
shim-unsigned-ia32
Red Hat:enterprise_linux:7::client
 before 0:15.8-3.el7
0:15.8-3.el7
shim-unsigned-x64
Red Hat:enterprise_linux:7::client
 before 0:15.8-3.el7
0:15.8-3.el7
shim-x64
Red Hat:enterprise_linux:7::client
 before 0:15.8-1.el7
0:15.8-1.el7
mokutil
Red Hat:enterprise_linux:7::server
 before 0:15.8-1.el7
0:15.8-1.el7
mokutil-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:enterprise_linux:7::server
 before 0:15.8-3.el7
0:15.8-3.el7
shim-ia32
Red Hat:enterprise_linux:7::server
 before 0:15.8-1.el7
0:15.8-1.el7
shim-signed
Red Hat:enterprise_linux:7::server
 before 0:15.8-1.el7
0:15.8-1.el7
shim-unsigned-ia32
Red Hat:enterprise_linux:7::server
 before 0:15.8-3.el7
0:15.8-3.el7
shim-unsigned-x64
Red Hat:enterprise_linux:7::server
 before 0:15.8-3.el7
0:15.8-3.el7
shim-x64
Red Hat:enterprise_linux:7::server
 before 0:15.8-1.el7
0:15.8-1.el7
mokutil
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-1.el7
0:15.8-1.el7
mokutil-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-3.el7
0:15.8-3.el7
shim-ia32
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-1.el7
0:15.8-1.el7
shim-signed
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-1.el7
0:15.8-1.el7
shim-unsigned-ia32
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-3.el7
0:15.8-3.el7
shim-unsigned-x64
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-3.el7
0:15.8-3.el7
shim-x64
Red Hat:enterprise_linux:7::workstation
 before 0:15.8-1.el7
0:15.8-1.el7
shim
Red Hat:rhel_eus:8.6::baseos
 before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim-aa64
Red Hat:rhel_eus:8.6::baseos
 before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim-ia32
Red Hat:rhel_eus:8.6::baseos
 before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim-x64
Red Hat:rhel_eus:8.6::baseos
 before 0:15.8-2.el8_6
0:15.8-2.el8_6
shim
SUSE:Linux Enterprise Micro 5.3
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.4
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.5
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Manager Proxy 4.3
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Manager Server 4.3
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.1
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise Micro 5.2
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Enterprise Storage 7.1
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
openSUSE:Leap Micro 5.3
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
openSUSE:Leap Micro 5.4
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
openSUSE:Leap 15.5
 before 15.8-150300.4.20.2
15.8-150300.4.20.2
shim
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 15.8-150100.3.38.1
15.8-150100.3.38.1
shim
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 15.8-150100.3.38.1
15.8-150100.3.38.1
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 15.8-150100.3.38.1
15.8-150100.3.38.1
shim
SUSE:Linux Enterprise Server 12 SP5
 before 15.8-25.30.1
15.8-25.30.1
shim
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 15.8-25.30.1
15.8-25.30.1
pcr-oracle
SUSE:Linux Micro 6.0
 before 0.4.6-2.1
0.4.6-2.1
shim
SUSE:Linux Micro 6.0
 before 15.8-1.1
15.8-1.1
shim
Ubuntu:14.04:LTS
 All versions, plus listed versions
0.4-0ubuntu40.8-0ubuntu20.9+1474479173.6c180c6-1ubuntu113-0ubuntu2
 None known
shim-signed
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.31.41.51.61.9
Show 8 moreShow less
1.17~14.04.11.18~14.04.11.19~14.04.11.32~14.04.21.33.1~14.04.21.33.1~14.04.31.33.1~14.04.41.33.1~14.04.5
 None known
shim
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.8-0ubuntu20.9+1474479173.6c180c6-1ubuntu113-0ubuntu215+1533136590.3beb971-0ubuntu115+1552672080.a4a1fbe-0ubuntu215.4-0ubuntu7
 None known
shim-signed
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.111.121.17~16.04.11.18~16.04.11.19~16.04.1
Show 10 moreShow less
1.27~16.04.11.28~16.04.11.32~16.04.11.33.1~16.04.11.33.1~16.04.21.33.1~16.04.31.33.1~16.04.41.33.1~16.04.51.33.1~16.04.61.33.1~16.04.10
 None known
shim
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.9+1474479173.6c180c6-1ubuntu113-0ubuntu215+1533136590.3beb971-0ubuntu115+1552672080.a4a1fbe-0ubuntu215.4-0ubuntu715.4-0ubuntu915.7-0ubuntu1
 None known
shim-signed
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.321.33.11.34.41.34.51.34.6
Show 13 moreShow less
1.34.71.34.81.34.91.34.9.11.34.9.21.37~18.04.11.37~18.04.21.37~18.04.31.37~18.04.61.37~18.04.81.37~18.04.101.37~18.04.111.37~18.04.13
 None known
shim
Ubuntu:20.04:LTS
 before 15.8-0ubuntu1, plus listed versions
15+1533136590.3beb971-0ubuntu115+1552672080.a4a1fbe-0ubuntu115+1552672080.a4a1fbe-0ubuntu215.4-0ubuntu715.4-0ubuntu915.7-0ubuntu1
15.8-0ubuntu1
shim-signed
Ubuntu:20.04:LTS
 before 1.40.10, plus listed versions
1.391.401.40.31.40.41.40.61.40.71.40.9
1.40.10
shim
Ubuntu:22.04:LTS
 before 15.8-0ubuntu1, plus listed versions
15.4-0ubuntu915.7-0ubuntu1
15.8-0ubuntu1
shim-signed
Ubuntu:22.04:LTS
 before 1.51.4, plus listed versions
1.511.51.3
1.51.4
shim
Ubuntu:24.04:LTS
 before 15.8-0ubuntu1, plus listed versions
15.7-0ubuntu1
15.8-0ubuntu1
shim-signed
Ubuntu:24.04:LTS
 before 1.58, plus listed versions
1.561.57
1.58

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-40546 is a medium vulnerability (CVSS 6.2) in Redhat Shim, published November 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in shim-aa64 15.8-4.el8_9.alma.1.

References

Show 88 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open