shim-review

This repo is for review of requests for signing shim. To create a request for review: clone this repo preferably fork it edit the template below add the shim.efi to be signed add build logs add any additional binaries/certificates/SHA256 hashes that may be needed commit all of that tag it with a...

abstractshimmer

ABSTRACT SHIMMER CVE-2020-15257 This repo contains proof-of-concept exploit code for CVE-2020-15257 as described in our blog post. While written for containerd 1.2.x and 1.3.x, it should work on pre-patch versions of containerd 1.4.x. $ go build $ docker build -t abstractshimmer . $ docker run --...

Malicious code in css-logical-prop-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ffba65f80ee8f200199c8c90ebb6297b8590537c80ea50bb34874d91665b5f The package ships thunderboltRegistry.js which imports childprocess and invokes execSync with curl commands at multiple sites lines 30, 39, 47, 48. T...

Malicious code in css-env-function-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e6fced50259d6d3781ef3917caba965e4744420188c3e06919541b64e2e294 Package self-describes as a CSS env shim but ships thunderboltRegistry.js, which runs an IIFE at module load that base64-decodes the strings...

shim

shim、ファーストステージ UEFI ブートローダー shim は、実行されると別のアプリケーションを開いて実行しようとする単純な EFI アプリケーションです。最初に標準の EFI LoadImage および StartImage 呼び出しを介してこれを試みます。これらの呼び出しが失敗した場合（たとえば、Secure Boot が有効で、バイナリが適切な鍵で署名されていない場合など）、組み込みの証明書に対してバイナリを検証します。これが成功し、バイナリまたは署名鍵が禁止されていない場合、shim はバイナリを再配置して実行します。 プロトコル shim ロックプロトコル shim...

ShimMe

ShimMe Tools from the DEFCON 32 talk "SHIM me what you got - Manipulating Shim and Office for Code Injection" Office Injector - Invokes an RPC method in OfficeClickToRun service that will inject a DLL into a suspended process running as NT AUTHORITY\SYSTEM launched by the task scheduler service,...

CVE-2026-8863

CVE-2026-8863 CVE-2026-8863 の影響を受ける署名済み UEFI Secure Boot shim バイナリのコレクションです。各イメージに埋め込まれた shim バージョン、Authenticode 署名者、失効ハッシュを収録しています。 バイト単位で同一の署名済み shim を同梱するリリースは 1 行に集約されます — 1 つの Authenticode ハッシュは、それを含むリリースの数に関係なく、1 つの dbx エントリです。 詳細は 私のブログ をご覧ください。 概要 ディストリビューション| リリース| shim| 組み込みベンダー CA...

Rocky Linux 9.6 [TuxCare] Security Update: shim-x64 Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1751552694)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1751552694 advisory. - There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function...

CentOS Linux 7 [TuxCare] Security Update: mokutil / shim-ia32 / shim-x64 Multiple Vulnerabilities (CENTOS7:CLSA-2025:1742929277)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1742929277 advisory. - There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes...

AZL-105903 CVE-2026-35189 affecting package shim-unsigned-x64 16.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105900 CVE-2026-35189 affecting package shim-unsigned-aarch64 16.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-71458: Observable Response Discrepancy

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No matches..." reveals whether a named resource org,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001491 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2026-091436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091436 advisory. There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData...

EulerOS Virtualization 2.10.1 : shim (EulerOS-SA-2026-3855)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2026-3889)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2026-3770)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap...

EulerOS Virtualization 2.12.0 : shim (EulerOS-SA-2026-3673)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature...

EulerOS Virtualization 2.11.0 : shim (EulerOS-SA-2026-3560)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext acros...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2026-3723)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap...