OESA-2024-1120 shim security update

🗓️ 02 Feb 2024 11:06:53Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Shim security update OESA-2024-1120 fixes remote code execution, buffer overflow, and out-of-bounds read vulnerabilities during boot.

Reporter	Title	Published	Views	Family All 362
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	6 Jun 202414:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in shim library (CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551) affect Power HMC.	10 Sep 202414:51	–	ibm
Tenable Nessus	Amazon Linux 2 : shim (ALAS-2024-2484)	5 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0114: shim (ALINUX3-SA-2024:0114)	14 May 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40548)	10 Feb 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40549)	10 Feb 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40550)	10 Feb 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: shim (CVE-2023-40551)	13 Mar 202500:00	–	nessus
Tenable Nessus	CentOS 7 : shim (RHSA-2024:1959)	26 Apr 202400:00	–	nessus

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40547
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40548
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40549
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40550
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40551

03 Sep 2025 06:19Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.3

EPSS0.04175

SSVC