shim-signed vulnerabilities (Red Hat)
17 vulnerabilities.
-
shim-signedRed Hat Shim: out of bounds read when parsing mz binaries 5.1 Medium -
shim-signedRed Hat Shim: out-of-bound read in verify_buffer_sbat() 5.5 Medium -
shim-signedRed Hat Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 6.2 Medium -
shim-signedRed Hat Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 7.4 High -
shim-signedRed Hat Shim: rce in http boot support may lead to secure boot bypass 8.3 High -
shim-signedRed Hat Shim: out-of-bounds read printing error messages 6.2 Medium -
shim-signedRed Hat GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim 6.4 Medium -
shim-signedRed Hat GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 5.7 Medium -
shim-signedRed Hat GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 6.4 Medium -
shim-signedRed Hat There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... 5.7 Medium -
shim-signedRed Hat There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... 5.7 Medium -
shim-signedRed Hat There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... 6.7 Medium -
shim-signedRed Hat In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic... 6.4 Medium -
shim-signedRed Hat A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack... 8.2 High -
shim-signedRed Hat Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted... 7.5 High -
shim-signedRed Hat Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a... 7.5 High -
shim-signedRed Hat Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted... 5.0 Medium