Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-09863
HistoryFeb 22, 2024 - 12:00 a.m.

Shim Buffer Overflow Vulnerability

2024-02-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
shim
buffer overflow
vulnerability
http service
remote code execution
secure startup
exploit
arbitrary code

8.6 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.2%

shim is a simple HTTP service for SciDB. Shim suffers from a security vulnerability that stems from a remote code execution vulnerability contained in the http startup support, which can be used to bypass the secure startup. An attacker can exploit this vulnerability to execute arbitrary code.

CPENameOperatorVersion
shim shimlt15.8