shim vulnerabilities (Red Hat)
32 vulnerabilities.
-
shimRed Hat Shim: out of bounds read when parsing mz binaries 5.1 Medium -
shimRed Hat Shim: out-of-bound read in verify_buffer_sbat() 5.5 Medium -
shimRed Hat Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 6.2 Medium -
shimRed Hat Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 7.4 High -
shimRed Hat Shim: rce in http boot support may lead to secure boot bypass 8.3 High -
shimRed Hat Shim: out-of-bounds read printing error messages 6.2 Medium -
shimRed Hat There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables 6.5 Medium -
shimRed Hat There's a use-after-free vulnerability in grub_cmd_chainloader() function 6.4 Medium -
shimRed Hat The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot... 6.7 Medium -
shimRed Hat Out-of-bounds write when handling split HTTP headers 8.1 High -
shimRed Hat Integer underflow in grub_net_recv_ip4_packets 8.1 High -
shimRed Hat A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... 7.0 High -
shimRed Hat A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... 4.5 Medium -
shimRed Hat A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... 4.5 Medium -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... 8.2 High -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... 6.7 Medium -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... 7.5 High -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... 6.7 Medium -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... 7.6 High -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... 8.2 High -
shimRed Hat A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of... 7.5 High -
shimRed Hat GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim 6.4 Medium -
shimRed Hat GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 5.7 Medium -
shimRed Hat GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 6.4 Medium -
shimRed Hat There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... 5.7 Medium -
shimRed Hat There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... 5.7 Medium -
shimRed Hat There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... 6.7 Medium -
shimRed Hat In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic... 6.4 Medium -
shimRed Hat A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack... 8.2 High -
shimRed Hat Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted... 7.5 High -
shimRed Hat Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a... 7.5 High -
shimRed Hat Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted... 5.0 Medium