{"id":"CVE-2023-40551","aliases":["ALSA-2024:1902","ALSA-2024:1903","AZL-34160","AZL-35258","BELL-CVE-2023-40551","CLSA-2024-1711036007","CLSA-2024-1711036383","CLSA-2024-1721204645","CLSA-2024-1724271309","CLSA-2025-1742806677","DEBIAN-CVE-2023-40551","DLA-3813-1","EUVD-2023-45122","GHSA-6j62-7qgg-9gww","OESA-2024-1115","OESA-2024-1116","OESA-2024-1117","OESA-2024-1118","OESA-2024-1119","OESA-2024-1120","RHSA-2024:1834","RHSA-2024:1835","RHSA-2024:1873","RHSA-2024:1876","RHSA-2024:1883","RHSA-2024:1902","RHSA-2024:1903","RHSA-2024:1959","RHSA-2024:2086","SUSE-SU-2024:1368-1","SUSE-SU-2024:1461-1","SUSE-SU-2024:1462-1","SUSE-SU-2025:20136-1","UBUNTU-CVE-2023-40551"],"status":"published","title":"Shim: out of bounds read when parsing mz binaries","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00397,"percentile":0.34436,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2024-01-23T00:00:00Z","modified":"2026-10-29T11:31:06Z","fixes":[{"ecosystem":"Azure Linux:2","package":"shim","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"shim","fixed_in":["15.8-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"shim","fixed_in":["15.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"shim","fixed_in":["15.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"shim","fixed_in":["15.8-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"shim","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"shim","fixed_in":["15.8-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"shim","fixed_in":["15.8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"shim-signed","fixed_in":["1.40.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"shim","fixed_in":["15.8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"shim-signed","fixed_in":["1.51.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"shim","fixed_in":["15.8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"shim-signed","fixed_in":["1.58"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el8_9.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el8_9.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el8_9.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el9_3.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-4.el9_3.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"},{"fixed":"15.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"},{"fixed":"15.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.7-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el8.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el8.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el8.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el8.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el8_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el8_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1~deb12u1"}]}],"versions":["15.7-1","15.8-1~deb10u1","15.8-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1~deb10u1"}]}],"versions":["15+1533136590.3beb971-10","15+1533136590.3beb971-7","15+1533136590.3beb971-7+deb10u1","15+1533136590.3beb971-8","15+1533136590.3beb971-9","15.3-1","15.3-1~deb10u1","15.3-1~deb10u2","15.3-1~deb10u3","15.3-2","15.3-3","15.4-1","15.4-1~deb10u1","15.4-2","15.4-2~deb10u1","15.4-3","15.4-3~deb10u1","15.4-4","15.4-5","15.4-5~deb10u1","15.4-6","15.4-6~deb10u1","15.4-7","15.4-7~deb10u1","15.6-1","15.6-1~deb10u1","15.6-1~deb11u1","15.7-1","15.7-1~deb10u1","15.7-1~deb11u1"],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15-28.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15-34.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4-13.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.6-16.oe2203sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.6-17.oe2203sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.6-19.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"shim-unsigned-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el9_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el8_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el9_3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el9_3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-4.el9_3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mokutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-unsigned-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mokutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-unsigned-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mokutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mokutil-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-unsigned-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-unsigned-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"shim-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.8-2.el8_6"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150300.4.20.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150100.3.38.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150100.3.38.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-150100.3.38.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-25.30.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-25.30.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"pcr-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.6-2.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4-0ubuntu4","0.8-0ubuntu2","0.9+1474479173.6c180c6-1ubuntu1","13-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3","1.4","1.5","1.6","1.9","1.17~14.04.1","1.18~14.04.1","1.19~14.04.1","1.32~14.04.2","1.33.1~14.04.2","1.33.1~14.04.3","1.33.1~14.04.4","1.33.1~14.04.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-0ubuntu2","0.9+1474479173.6c180c6-1ubuntu1","13-0ubuntu2","15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11","1.12","1.17~16.04.1","1.18~16.04.1","1.19~16.04.1","1.27~16.04.1","1.28~16.04.1","1.32~16.04.1","1.33.1~16.04.1","1.33.1~16.04.2","1.33.1~16.04.3","1.33.1~16.04.4","1.33.1~16.04.5","1.33.1~16.04.6","1.33.1~16.04.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9+1474479173.6c180c6-1ubuntu1","13-0ubuntu2","15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7","15.4-0ubuntu9","15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.32","1.33.1","1.34.4","1.34.5","1.34.6","1.34.7","1.34.8","1.34.9","1.34.9.1","1.34.9.2","1.37~18.04.1","1.37~18.04.2","1.37~18.04.3","1.37~18.04.6","1.37~18.04.8","1.37~18.04.10","1.37~18.04.11","1.37~18.04.13"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-0ubuntu1"}]}],"versions":["15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7","15.4-0ubuntu9","15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.10"}]}],"versions":["1.39","1.40","1.40.3","1.40.4","1.40.6","1.40.7","1.40.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-0ubuntu1"}]}],"versions":["15.4-0ubuntu9","15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.4"}]}],"versions":["1.51","1.51.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-0ubuntu1"}]}],"versions":["15.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58"}]}],"versions":["1.56","1.57"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"shim"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1834","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1835","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1873","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1876","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1883","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1902","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1903","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1959","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2086","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40551","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259918","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40551","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-6j62-7qgg-9gww"},{"url":"https://access.redhat.com/security/cve/CVE-2023-40546","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40547","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40548","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40549","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40550","tags":["report"]},{"url":"https://bugzilla.redhat.com/2234589","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241782","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241796","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241797","tags":["report"]},{"url":"https://bugzilla.redhat.com/2259915","tags":["report"]},{"url":"https://bugzilla.redhat.com/2259918","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1902.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1903.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-40551","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1711036007.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1711036383.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1721204645.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2024-1724271309.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1742806677.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40551.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-40551","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40547","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1116","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40550","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1118","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1119","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1120","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259915","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1834.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40546","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40547","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40548","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40549","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40550","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40551","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1835.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1873.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1876.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1883.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1902.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1903.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-2155","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4382","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4390","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1959.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2086.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241368-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198101","tags":["report"]},{"url":"https://bugzilla.suse.com/1205588","tags":["report"]},{"url":"https://bugzilla.suse.com/1205855","tags":["report"]},{"url":"https://bugzilla.suse.com/1210382","tags":["report"]},{"url":"https://bugzilla.suse.com/1213945","tags":["report"]},{"url":"https://bugzilla.suse.com/1215098","tags":["report"]},{"url":"https://bugzilla.suse.com/1215099","tags":["report"]},{"url":"https://bugzilla.suse.com/1215100","tags":["report"]},{"url":"https://bugzilla.suse.com/1215101","tags":["report"]},{"url":"https://bugzilla.suse.com/1215102","tags":["report"]},{"url":"https://bugzilla.suse.com/1215103","tags":["report"]},{"url":"https://bugzilla.suse.com/1219460","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40551","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241461-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241462-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520136-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-40551","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-40551","title":"Shim: out of bounds read when parsing mz binaries","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T16:46:43.579Z","modified":"2025-11-20T19:53:39.583Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-45122","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T16:46:43Z","modified":"2025-11-20T19:53:39Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:14.058235Z"}],"ghsa":[{"id":"GHSA-6j62-7qgg-9gww","title":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a...","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T18:31:53Z","modified":"2024-06-10T18:30:52Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:27.150795Z"}],"nvd":[{"id":"CVE-2023-40551","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T17:15:08.97Z","modified":"2026-06-17T06:18:26.513Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:09:04.527564Z"}],"osv":[{"id":"AZL-34160","title":"CVE-2023-40551 affecting package shim for versions less than 15.8-1","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T17:15:08Z","modified":"2026-04-21T04:27:03.642874Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-35258","title":"CVE-2023-40551 affecting package shim for versions less than 15.8-3","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T17:15:08Z","modified":"2026-04-21T04:53:51.139644Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"BELL-CVE-2023-40551","status":"published","published":"2024-01-25T05:57:07.992219Z","modified":"2026-01-26T09:33:35.090889Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-40551","title":"Shim: out of bounds read when parsing mz binaries","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T16:46:43.579Z","modified":"2026-10-28T02:30:34.379950753Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-40551","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-29T17:15:08.97Z","modified":"2026-10-26T18:01:27.514100004Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"OESA-2024-1115","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:33Z","modified":"2026-08-18T01:18:14.241756129Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1116","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:33Z","modified":"2026-08-18T01:18:14.235306104Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1117","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:33Z","modified":"2026-08-18T01:18:14.18556695Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1118","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.42485664Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1119","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.241721911Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1120","title":"shim security update","description":"Initial UEFI bootloader that handles chaining to a trusted full \\ bootloader under secure boot environments.\r\n\r\nSecurity Fix(es):\r\n\r\nA remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.(CVE-2023-40547)\r\n\r\nA buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.(CVE-2023-40548)\r\n\r\nAn out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.(CVE-2023-40549)\r\n\r\nAn out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40550)\r\n\r\nA flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system\u0026apos;s boot phase.(CVE-2023-40551)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.28879808Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:1834","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:12Z","modified":"2026-06-27T10:19:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1835","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:01Z","modified":"2026-06-27T10:19:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1873","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:45Z","modified":"2026-06-27T10:19:21Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1876","title":"Red Hat Security Advisory: shim bug fix update","status":"published","published":"2024-10-01T13:44:34Z","modified":"2026-06-27T10:19:22Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1883","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:22Z","modified":"2026-06-27T10:19:23Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1902","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:44:56Z","modified":"2026-06-27T10:19:23Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1903","title":"Red Hat Security Advisory: shim bug fix update","status":"published","published":"2024-10-01T13:45:08Z","modified":"2026-06-27T10:19:24Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1959","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:45:19Z","modified":"2026-06-27T10:19:24Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2086","title":"Red Hat Security Advisory: shim security update","status":"published","published":"2024-10-01T13:45:30Z","modified":"2026-06-27T10:19:25Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-40551","description":"A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.","status":"published","published":"2024-01-23T00:00:00Z","modified":"2025-11-21T05:21:35Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"},{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:1902","title":"Important: shim security update","description":"The shim package contains a first-stage UEFI boot loader that handles chaining\nto a trusted full boot loader under secure boot environments.\n\nSecurity Fix(es):\n\n* shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)\n* shim: Interger overflow leads to heap buffer overflow in verify_sbat_section\non 32-bits systems (CVE-2023-40548)\n* shim: Out-of-bounds read printing error messages (CVE-2023-40546)\n* shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file\n(CVE-2023-40549)\n* shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)\n* shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-29T11:02:27.57073254Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1903","title":"Important: shim bug fix update","description":"The shim package contains a first-stage UEFI boot loader that handles chaining\nto a trusted full boot loader under secure boot environments.\n\nSecurity Fix(es):\n\n* shim: RCE in http boot support may lead to Secure Boot bypass (CVE-2023-40547)\n* shim: Interger overflow leads to heap buffer overflow in verify_sbat_section\non 32-bits systems (CVE-2023-40548)\n* shim: Out-of-bounds read printing error messages (CVE-2023-40546)\n* shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file\n(CVE-2023-40549)\n* shim: Out-of-bound read in verify_buffer_sbat() (CVE-2023-40550)\n* shim: out of bounds read when parsing MZ binaries (CVE-2023-40551)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-29T11:31:06.117911004Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1711036007","title":"shim: Fix of 4 CVEs","description":"- Make this package installable only on a system having Cloudlinux signed\n  components: grub2 and kernel\n- Update to shim-15.8 and fix the following CVEs:\n  Resolves: CVE-2023-40546\n  Resolves: CVE-2023-40547\n  Resolves: СVE-2023-40548\n  Resolves: СVE-2023-40549\n  Resolves: CVE-2023-40550\n  Resolves: CVE-2023-40551","status":"published","published":"2024-03-21T15:46:50Z","modified":"2026-06-01T00:33:12.162723174Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1711036383","title":"shim: Fix of 4 CVEs","description":"- Make this package installable only on a system having Cloudlinux signed\n  components: grub2 and kernel\n- Update to shim-15.8 and fix the following CVEs:\n  Resolves: CVE-2023-40546\n  Resolves: CVE-2023-40547\n  Resolves: СVE-2023-40548\n  Resolves: СVE-2023-40549\n  Resolves: CVE-2023-40550\n  Resolves: CVE-2023-40551","status":"published","published":"2024-03-21T15:53:06Z","modified":"2026-06-01T00:33:22.32457185Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1721204645","title":"shim-signed: Fix of 4 CVEs","description":"- Make this package installable on a system having a either \n  Centos or Cloudlinux signed kernel\n- Update to shim-15.8 and fix the following CVEs:\n  Resolves: CVE-2023-40546\n  Resolves: CVE-2023-40547\n  Resolves: СVE-2023-40548\n  Resolves: СVE-2023-40549\n  Resolves: CVE-2023-40550\n  Resolves: CVE-2023-40551","status":"published","published":"2024-07-17T08:26:34Z","modified":"2026-06-01T00:33:17.575344486Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1724271309","title":"shim: Fix of 4 CVEs","description":"- Make this package installable only on a system having Cloudlinux signed\n  components: grub2 and kernel\n- Update to shim-15.8 and fix the following CVEs:\n  Resolves: CVE-2023-40546\n  Resolves: CVE-2023-40547\n  Resolves: СVE-2023-40548\n  Resolves: СVE-2023-40549\n  Resolves: CVE-2023-40550\n  Resolves: CVE-2023-40551","status":"published","published":"2024-08-21T20:17:04Z","modified":"2026-06-01T00:32:55.340099361Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1742806677","title":"shim: Fix of 4 CVEs","description":"- Make this package installable only on a system having a either\n  Almalinux or Cloudlinux signed kernel\n- Update to shim-15.8 and fix the following CVEs:\n  Resolves: CVE-2023-40546\n  Resolves: CVE-2023-40547\n  Resolves: СVE-2023-40548\n  Resolves: СVE-2023-40549\n  Resolves: CVE-2023-40550\n  Resolves: CVE-2023-40551","status":"published","published":"2025-03-24T08:58:03Z","modified":"2026-06-01T00:30:33.855725516Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-3813-1","title":"shim - security update","status":"published","published":"2024-05-13T00:00:00Z","modified":"2026-03-09T01:22:46.026425Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"SUSE-SU-2024:1368-1","title":"Security update for shim","description":"This update for shim fixes the following issues:\n\n- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)\n- Limit the requirement of fde-tpm-helper-macros to the distro with\n  suse_version 1600 and above (bsc#1219460)\n\nUpdate to version 15.8:\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n        \nThe NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.\n\n- Generate dbx during build so we don't include binary files in sources\n- Don't require grub so shim can still be used with systemd-boot\n- Update shim-install to fix boot failure of ext4 root file system\n  on RAID10 (bsc#1205855)\n- Adopt the macros from fde-tpm-helper-macros to update the\n  signature in the sealed key after a bootloader upgrade\n\n- Update shim-install to amend full disk encryption support\n  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector\n  - Use the long name to specify the grub2 key protector\n  - cryptodisk: support TPM authorized policies\n  - Do not use tpm_record_pcrs unless the command is in command.lst\n\n- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to\n  enable the NX compatibility flag when using post-process-pe after\n  discussed with grub2 experts in mail. It's useful for further development\n  and testing. (bsc#1205588)\n","status":"published","published":"2024-04-22T09:06:33Z","modified":"2025-05-02T04:33:04.283397Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1461-1","title":"Security update for shim","description":"This update for shim fixes the following issues:\n\n- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)\n- Limit the requirement of fde-tpm-helper-macros to the distro with\n  suse_version 1600 and above (bsc#1219460)\n\nUpdate to version 15.8:\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n        \nThe NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.\n\n- Generate dbx during build so we don't include binary files in sources\n- Don't require grub so shim can still be used with systemd-boot\n- Update shim-install to fix boot failure of ext4 root file system\n  on RAID10 (bsc#1205855)\n- Adopt the macros from fde-tpm-helper-macros to update the\n  signature in the sealed key after a bootloader upgrade\n\n- Update shim-install to amend full disk encryption support\n  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector\n  - Use the long name to specify the grub2 key protector\n  - cryptodisk: support TPM authorized policies\n  - Do not use tpm_record_pcrs unless the command is in command.lst\n\n- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to\n  enable the NX compatibility flag when using post-process-pe after\n  discussed with grub2 experts in mail. It's useful for further development\n  and testing. (bsc#1205588)\n","status":"published","published":"2024-04-29T11:19:11Z","modified":"2026-02-04T03:43:29.240556Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1462-1","title":"Security update for shim","description":"This update for shim fixes the following issues:\n\n- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)\n- Limit the requirement of fde-tpm-helper-macros to the distro with\n  suse_version 1600 and above (bsc#1219460)\n\nUpdate to version 15.8:\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n        \nThe NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.\n\n- Generate dbx during build so we don't include binary files in sources\n- Don't require grub so shim can still be used with systemd-boot\n- Update shim-install to fix boot failure of ext4 root file system\n  on RAID10 (bsc#1205855)\n- Adopt the macros from fde-tpm-helper-macros to update the\n  signature in the sealed key after a bootloader upgrade\n\n- Update shim-install to amend full disk encryption support\n  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector\n  - Use the long name to specify the grub2 key protector\n  - cryptodisk: support TPM authorized policies\n  - Do not use tpm_record_pcrs unless the command is in command.lst\n\n- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to\n  enable the NX compatibility flag when using post-process-pe after\n  discussed with grub2 experts in mail. It's useful for further development\n  and testing. (bsc#1205588)\n","status":"published","published":"2024-04-29T11:20:38Z","modified":"2026-02-04T04:38:27.319975Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2025:20136-1","title":"Security update for pcr-oracle, shim","description":"This update for pcr-oracle, shim fixes the following issues:\n\npcr-oracle:\n\n- predict SbatLevelRT for the next boot (bsc#1230316)\n\nshim was updated to version 15.8:\n\n- Update shim-install to use the 'removable' way for encrypted\n  SL-Micro images (bsc#1230316)\n  * Always use the removable way for SL-Micro\n  * Limit the removable option to encrypted SL-Micro\n\n\nSecurity issues fixed:\n\n- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)\n- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)\n- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)\n- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)\n- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)\n- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)\n\n\n","status":"published","published":"2025-03-07T15:31:20Z","modified":"2026-03-23T04:47:10.202204Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}