PRIOn knowledge basePRION:CVE-2023-40549

HistoryJan 29, 2024 - 5:15 p.m.

Design/Logic Flaw

2024-01-2917:15:00

PRIOn knowledge base

www.prio-n.com

pe binary

out-of-bounds read

shim

denial of service

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

CPENameOperatorVersion
fedoraeq39
enterprise_linuxeq8.0
enterprise_linuxeq9.0
shimlt15.8

Name	Operator	Version
fedora	eq	39
enterprise_linux	eq	8.0
enterprise_linux	eq	9.0
shim	lt	15.8

References

access.redhat.com/security/cve/CVE-2023-40549

bugzilla.redhat.com/show_bug.cgi?id=2241797