AZL-35265 CVE-2023-40550 affecting package shim-unsigned-aarch64 for versions less than 15.8-3

🗓️ 29 Jan 2024 17:15:08Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Out-of-bounds read in Shim SBAT validation could expose data during boot for shim unsigned aarch64 before 15.8-3.

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	6 Jun 202414:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in shim library (CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551) affect Power HMC.	10 Sep 202414:51	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0114: shim (ALINUX3-SA-2024:0114)	14 May 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40550)	10 Feb 202500:00	–	nessus
Tenable Nessus	CentOS 7 : shim (RHSA-2024:1959)	26 Apr 202400:00	–	nessus
Tenable Nessus	Debian dla-3813 : shim-helpers-amd64-signed-template - security update	14 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : shim (EulerOS-SA-2024-1227)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : shim (EulerOS-SA-2024-1249)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : shim (EulerOS-SA-2024-1619)	15 May 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40550

21 Apr 2026 04:19Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.5

EPSS0.00024