Important: shim bug fix update

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments. Security Fixes: shim: RCE in http boot support may lead to Secure Boot bypass CVE-2023-40547 shim: Interger overflow leads to heap buffer overflow in...

RHEL 8 : shim (RHSA-2024:1883)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1883 advisory. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...

RHEL 9 : shim (RHSA-2024:1835)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1835 advisory. The shim package contains a first stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...

Important: Red Hat Security Advisory: shim security update

An update for shim is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

shim: out of bounds read when parsing MZ binaries

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase...

EulerOS 2.0 SP9 : shim (EulerOS-SA-2024-1497)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. Th...

EulerOS 2.0 SP9 : shim (EulerOS-SA-2024-1518)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. Thi...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

Mz Automation Libiec61850 安全漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation Libiec61850 v1.4.0 and earlier versions, which originates from the mmsServerhandleFileCloseRequest.c function in src/mms/isomms/server/mmsfileservice...

CVE-2024-28286: NULL Pointer Dereference

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

CVE-2024-28286

The mz-automation libiec61850 library (specifically version 1.4.0 and earlier) contains a NULL Pointer Dereference vulnerability within the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c. This flaw results in a SEGV (segmentation violation), causing the a...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

CVE-2024-26529: Undefined Security Weakness

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

CVE-2024-26529

The mz-automation libiec61850 library (versions v.1.5.3 and earlier ) contains a vulnerability in the mmsServer_handleDeleteNamedVariableListRequest function located in src/mms/iso_mms/server/mms_named_variable_list_service.c. The root cause is associated with improper cleanup or deallocation of ...

libiec61850 Security Vulnerabilities

libIEC61850 is an open source library for the IEC 61850 protocol open source by MZ Automation. A security vulnerability exists in libiec61850 v.1.5.3 and earlier versions, which originated from allowing a remote attacker to cause a denial of service DoS...

CVE-2024-25366

Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServerhandleGetNameListRequest function to the mmsgetnamelistservice component...

Buffer overflow

Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServerhandleGetNameListRequest function to the mmsgetnamelistservice component...

CVE-2024-25366

The mz-automation.de libiec61859 library (v.1.4.0) contains a buffer overflow vulnerability within the mms_getnamelist_service component. A remote attacker can exploit the mmsServer_handleGetNameListRequest function to cause a denial of service . To mitigate this risk, it is recommended to disabl...