AZL-35254 CVE-2023-40547 affecting package shim for versions less than 15.8-3

🗓️ 25 Jan 2024 16:15:07Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Shim remote code execution during early boot via attacker HTTP response enables out-of-bounds write and full compromise; MITM or boot server compromise required.

Reporter	Title	Published	Views	Family All 205
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	6 Jun 202414:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in shim library (CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551) affect Power HMC.	10 Sep 202414:51	–	ibm
Tenable Nessus	Amazon Linux 2 : shim (ALAS-2024-2484)	5 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0114: shim (ALINUX3-SA-2024:0114)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 7 : shim (RHSA-2024:1959)	26 Apr 202400:00	–	nessus
Tenable Nessus	Debian dla-3813 : shim-helpers-amd64-signed-template - security update	14 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : shim (EulerOS-SA-2024-1227)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : shim (EulerOS-SA-2024-1249)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : shim (EulerOS-SA-2024-1497)	9 Apr 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40547

21 Apr 2026 04:27Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.3

EPSS0.03784