{"id":"CVE-2023-40548","aliases":["ALSA-2024:1902","ALSA-2024:1903","AZL-34093","AZL-34197","AZL-35255","AZL-35263","AZL-35275","BELL-CVE-2023-40548","DEBIAN-CVE-2023-40548","DLA-3813-1","EUVD-2023-45119","GHSA-7cf2-63mg-hv4j","OESA-2024-1117","OESA-2024-1118","OESA-2024-1119","OESA-2024-1120","RHSA-2024:1834","RHSA-2024:1835","RHSA-2024:1873","RHSA-2024:1876","RHSA-2024:1883","RHSA-2024:1902","RHSA-2024:1903","RHSA-2024:1959","RHSA-2024:2086","SUSE-SU-2024:1368-1","SUSE-SU-2024:1461-1","SUSE-SU-2024:1462-1","SUSE-SU-2025:20136-1","UBUNTU-CVE-2023-40548"],"status":"published","title":"Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00436,"percentile":0.38291,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-190","CWE-787"],"published":"2024-01-23T00:00:00Z","modified":"2026-10-29T11:31:06Z","fixes":[{"ecosystem":"Azure Linux:2","package":"shim-unsigned-x64","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"shim","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"shim","fixed_in":["15.8-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"shim-unsigned-aarch64","fixed_in":["15.8-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"shim-unsigned-x64","fixed_in":["15.8-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"shim","fixed_in":["15.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"shim","fixed_in":["15.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"shim","fixed_in":["15.8-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"shim","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"shim","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"shim","fixed_in":["15.8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"shim-signed","fixed_in":["1.40.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"shim","fixed_in":["15.8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"shim-signed","fixed_in":["1.51.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"shim","fixed_in":["15.8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"shim-signed","fixed_in":["1.58"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el8_9.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el8_9.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el8_9.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el9_3.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el9_3.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:2","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"shim-unsigned-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"},{"fixed":"15.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"},{"fixed":"15.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1~deb12u1"}]}],"versions":["15.7-1","15.8-1~deb10u1","15.8-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1~deb10u1"}]}],"versions":["15+1533136590.3beb971-10","15+1533136590.3beb971-7","15+1533136590.3beb971-7+deb10u1","15+1533136590.3beb971-8","15+1533136590.3beb971-9","15.3-1","15.3-1~deb10u1","15.3-1~deb10u2","15.3-1~deb10u3","15.3-2","15.3-3","15.4-1","15.4-1~deb10u1","15.4-2","15.4-2~deb10u1","15.4-3","15.4-3~deb10u1","15.4-4","15.4-5","15.4-5~deb10u1","15.4-6","15.4-6~deb10u1","15.4-7","15.4-7~deb10u1","15.6-1","15.6-1~deb10u1","15.6-1~deb11u1","15.7-1","15.7-1~deb10u1","15.7-1~deb11u1"],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4-13.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.6-16.oe2203sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.6-17.oe2203sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.6-19.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"shim-unsigned-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el9_3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el9_3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el9_3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mokutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-unsigned-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mokutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-unsigned-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mokutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-unsigned-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150100.3.38.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150100.3.38.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150100.3.38.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-25.30.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-25.30.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"pcr-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.6-2.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4-0ubuntu4","0.8-0ubuntu2","0.9+1474479173.6c180c6-1ubuntu1","13-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3","1.4","1.5","1.6","1.9","1.17~14.04.1","1.18~14.04.1","1.19~14.04.1","1.32~14.04.2","1.33.1~14.04.2","1.33.1~14.04.3","1.33.1~14.04.4","1.33.1~14.04.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-0ubuntu2","0.9+1474479173.6c180c6-1ubuntu1","13-0ubuntu2","15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11","1.12","1.17~16.04.1","1.18~16.04.1","1.19~16.04.1","1.27~16.04.1","1.28~16.04.1","1.32~16.04.1","1.33.1~16.04.1","1.33.1~16.04.2","1.33.1~16.04.3","1.33.1~16.04.4","1.33.1~16.04.5","1.33.1~16.04.6","1.33.1~16.04.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9+1474479173.6c180c6-1ubuntu1","13-0ubuntu2","15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7","15.4-0ubuntu9","15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.32","1.33.1","1.34.4","1.34.5","1.34.6","1.34.7","1.34.8","1.34.9","1.34.9.1","1.34.9.2","1.37~18.04.1","1.37~18.04.2","1.37~18.04.3","1.37~18.04.6","1.37~18.04.8","1.37~18.04.10","1.37~18.04.11","1.37~18.04.13"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-0ubuntu1"}]}],"versions":["15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7","15.4-0ubuntu9","15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.10"}]}],"versions":["1.39","1.40","1.40.3","1.40.4","1.40.6","1.40.7","1.40.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-0ubuntu1"}]}],"versions":["15.4-0ubuntu9","15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.4"}]}],"versions":["1.51","1.51.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-0ubuntu1"}]}],"versions":["15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58"}]}],"versions":["1.56","1.57"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"redhat","product":"shim"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1834","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1835","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1873","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1876","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1883","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1902","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1903","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1959","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2086","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40548","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241782","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40548","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-7cf2-63mg-hv4j"},{"url":"https://access.redhat.com/security/cve/CVE-2023-40546","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40547","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40549","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40550","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40551","tags":["report"]},{"url":"https://bugzilla.redhat.com/2234589","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241782","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241796","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241797","tags":["report"]},{"url":"https://bugzilla.redhat.com/2259915","tags":["report"]},{"url":"https://bugzilla.redhat.com/2259918","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1902.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1903.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-40548","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40548.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-40548","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40551","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1118","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1119","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1120","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259918","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1834.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40546","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40547","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40548","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40549","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40550","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40551","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1835.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1873.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1876.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1883.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1902.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1903.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-2155","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4382","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4390","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1959.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2086.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241368-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198101","tags":["report"]},{"url":"https://bugzilla.suse.com/1205588","tags":["report"]},{"url":"https://bugzilla.suse.com/1205855","tags":["report"]},{"url":"https://bugzilla.suse.com/1210382","tags":["report"]},{"url":"https://bugzilla.suse.com/1213945","tags":["report"]},{"url":"https://bugzilla.suse.com/1215098","tags":["report"]},{"url":"https://bugzilla.suse.com/1215099","tags":["report"]},{"url":"https://bugzilla.suse.com/1215100","tags":["report"]},{"url":"https://bugzilla.suse.com/1215101","tags":["report"]},{"url":"https://bugzilla.suse.com/1215102","tags":["report"]},{"url":"https://bugzilla.suse.com/1215103","tags":["report"]},{"url":"https://bugzilla.suse.com/1219460","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40551","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241461-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241462-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520136-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-40548","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-40548","title":"Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T14:53:44.319Z","modified":"2026-06-26T09:44:21.185Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-45119","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T14:53:44Z","modified":"2026-06-26T09:44:21Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:24.957062Z"}],"ghsa":[{"id":"GHSA-7cf2-63mg-hv4j","title":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition...","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:30:29Z","modified":"2026-03-26T05:02:45Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-122","CWE-190","CWE-787"],"updated_at":"2026-11-02T15:06:52.37988Z"}],"nvd":[{"id":"CVE-2023-40548","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08.893Z","modified":"2026-06-26T10:16:22.183Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:09:01.900189Z"}],"osv":[{"id":"AZL-34093","title":"CVE-2023-40548 affecting package shim-unsigned-x64 for versions less than 15.8-1","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08Z","modified":"2026-04-21T04:27:02.328009Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-34197","title":"CVE-2023-40548 affecting package shim for versions less than 15.8-1","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08Z","modified":"2026-04-21T04:27:03.879906Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-35255","title":"CVE-2023-40548 affecting package shim for versions less than 15.8-3","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08Z","modified":"2026-04-21T04:51:38.817646Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-35263","title":"CVE-2023-40548 affecting package shim-unsigned-aarch64 for versions less than 15.8-3","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08Z","modified":"2026-04-21T04:51:51.646259Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-35275","title":"CVE-2023-40548 affecting package shim-unsigned-x64 for versions less than 15.8-3","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08Z","modified":"2026-04-21T04:52:51.890571Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"BELL-CVE-2023-40548","status":"published","published":"2024-01-25T05:57:07.34222Z","modified":"2026-01-26T09:33:35.045335Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-40548","title":"Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T14:53:44.319Z","modified":"2026-10-28T02:30:43.229069378Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-40548","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-29T15:15:08.893Z","modified":"2026-10-26T18:02:32.379263356Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"OESA-2024-1117","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:33Z","modified":"2026-08-18T01:18:14.18556695Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1118","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.42485664Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1119","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.241721911Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1120","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.28879808Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:1834","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:12Z","modified":"2026-06-27T10:19:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1835","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:01Z","modified":"2026-06-27T10:19:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1873","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:45Z","modified":"2026-06-27T10:19:21Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1876","title":"Red Hat Security Advisory: shim bug fix update","status":"published","published":"2024-10-01T13:44:34Z","modified":"2026-06-27T10:19:22Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1883","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:22Z","modified":"2026-06-27T10:19:23Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1902","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:56Z","modified":"2026-06-27T10:19:23Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1903","title":"Red Hat Security Advisory: shim bug fix update","status":"published","published":"2024-10-01T13:45:08Z","modified":"2026-06-27T10:19:24Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1959","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:45:19Z","modified":"2026-06-27T10:19:24Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2086","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:45:30Z","modified":"2026-06-27T10:19:25Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-40548","description":"A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.","status":"published","published":"2024-01-23T00:00:00Z","modified":"2025-11-21T05:21:35Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:1902","title":"Important: shim security update","description":"The shim package contains a first-stage UEFI boot loader that handles chaining\nto a trusted full boot loader under secure boot environments.\n\nSecurity Fix(es):\n\n* shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)\n* shim: Interger overflow leads to heap buffer overflow in verify_sbat_section\non 32-bits systems (CVE-2023-40548)\n* shim: Out-of-bounds read printing error messages (CVE-2023-40546)\n* shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file\n(CVE-2023-40549)\n* shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)\n* shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-29T11:02:27.57073254Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1903","title":"Important: shim bug fix update","description":"The shim package contains a first-stage UEFI boot loader that handles chaining\nto a trusted full boot loader under secure boot environments.\n\nSecurity Fix(es):\n\n* shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)\n* shim: Interger overflow leads to heap buffer overflow in verify_sbat_section\non 32-bits systems (CVE-2023-40548)\n* shim: Out-of-bounds read printing error messages (CVE-2023-40546)\n* shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file\n(CVE-2023-40549)\n* shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)\n* shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-29T11:31:06.117911004Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"DLA-3813-1","title":"shim - security update","status":"published","published":"2024-05-13T00:00:00Z","modified":"2026-03-09T01:22:46.026425Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"SUSE-SU-2024:1368-1","title":"Security update for shim","description":"This update for shim fixes the following issues:\n\n- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)\n- Limit the requirement of fde-tpm-helper-macros to the distro with\n  suse_version 1600 and above (bsc#1219460)\n\nUpdate to version 15.8:\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n        \nThe NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.\n\n- Generate dbx during build so we don't include binary files in sources\n- Don't require grub so shim can still be used with systemd-boot\n- Update shim-install to fix boot failure of ext4 root file system\n  on RAID10 (bsc#1205855)\n- Adopt the macros from fde-tpm-helper-macros to update the\n  signature in the sealed key after a bootloader upgrade\n\n- Update shim-install to amend full disk encryption support\n  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector\n  - Use the long name to specify the grub2 key protector\n  - cryptodisk: support TPM authorized policies\n  - Do not use tpm_record_pcrs unless the command is in command.lst\n\n- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to\n  enable the NX compatibility flag when using post-process-pe after\n  discussed with grub2 experts in mail. It's useful for further development\n  and testing. (bsc#1205588)\n","status":"published","published":"2024-04-22T09:06:33Z","modified":"2025-05-02T04:33:04.283397Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1461-1","title":"Security update for shim","description":"This update for shim fixes the following issues:\n\n- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)\n- Limit the requirement of fde-tpm-helper-macros to the distro with\n  suse_version 1600 and above (bsc#1219460)\n\nUpdate to version 15.8:\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n        \nThe NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.\n\n- Generate dbx during build so we don't include binary files in sources\n- Don't require grub so shim can still be used with systemd-boot\n- Update shim-install to fix boot failure of ext4 root file system\n  on RAID10 (bsc#1205855)\n- Adopt the macros from fde-tpm-helper-macros to update the\n  signature in the sealed key after a bootloader upgrade\n\n- Update shim-install to amend full disk encryption support\n  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector\n  - Use the long name to specify the grub2 key protector\n  - cryptodisk: support TPM authorized policies\n  - Do not use tpm_record_pcrs unless the command is in command.lst\n\n- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to\n  enable the NX compatibility flag when using post-process-pe after\n  discussed with grub2 experts in mail. It's useful for further development\n  and testing. (bsc#1205588)\n","status":"published","published":"2024-04-29T11:19:11Z","modified":"2026-02-04T03:43:29.240556Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1462-1","title":"Security update for shim","description":"This update for shim fixes the following issues:\n\n- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)\n- Limit the requirement of fde-tpm-helper-macros to the distro with\n  suse_version 1600 and above (bsc#1219460)\n\nUpdate to version 15.8:\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n        \nThe NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.\n\n- Generate dbx during build so we don't include binary files in sources\n- Don't require grub so shim can still be used with systemd-boot\n- Update shim-install to fix boot failure of ext4 root file system\n  on RAID10 (bsc#1205855)\n- Adopt the macros from fde-tpm-helper-macros to update the\n  signature in the sealed key after a bootloader upgrade\n\n- Update shim-install to amend full disk encryption support\n  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector\n  - Use the long name to specify the grub2 key protector\n  - cryptodisk: support TPM authorized policies\n  - Do not use tpm_record_pcrs unless the command is in command.lst\n\n- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to\n  enable the NX compatibility flag when using post-process-pe after\n  discussed with grub2 experts in mail. It's useful for further development\n  and testing. (bsc#1205588)\n","status":"published","published":"2024-04-29T11:20:38Z","modified":"2026-02-04T04:38:27.319975Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2025:20136-1","title":"Security update for pcr-oracle, shim","description":"This update for pcr-oracle, shim fixes the following issues:\n\npcr-oracle:\n\n- predict SbatLevelRT for the next boot (bsc#1230316)\n\nshim was updated to version 15.8:\n\n- Update shim-install to use the 'removable' way for encrypted\n  SL-Micro images (bsc#1230316)\n  * Always use the removable way for SL-Micro\n  * Limit the removable option to encrypted SL-Micro\n\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n\n","status":"published","published":"2025-03-07T15:31:20Z","modified":"2026-03-23T04:47:10.202204Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}