CBL Mariner 2.0 Security Update: shim (CVE-2023-40551)

The version of shim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40551 advisory. - A flaw was found in the MZ binary format in Shim. An out-of-bounds read May occur, leading to a crash or...

CBL Mariner 2.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40548)

The version of shim / shim-unsigned-aarch64 / shim-unsigned-x64 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40548 advisory. - A buffer overflow was found in Shim in the 32-bit system. The...

Shim: out-of-bounds read printing error messages

...

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

...

Shim: out-of-bound read in verify_buffer_sbat()

...

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

...

Security Bulletin: Vulnerabilities in shim library (CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551) affect Power HMC.

Summary The shim library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-40546 DESCRIPTION: rhboot shim is vulnerable to a denial of service, caused by a NULL pointer dereference f;aw in the mirroroneesl function in...

CVE-2023-40547 affecting package shim for versions less than 15.8-1

CVE-2023-40547 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40548 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40548 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40548 affecting package shim for versions less than 15.8-1

CVE-2023-40548 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40549 affecting package shim for versions less than 15.8-1

CVE-2023-40549 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40546 affecting package shim for versions less than 15.8-1

CVE-2023-40546 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40551 affecting package shim for versions less than 15.8-1

CVE-2023-40551 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40549 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40549 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40547 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40547 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40550 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40550 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-28737 affecting package shim for versions less than 15.8-1

CVE-2022-28737 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40550 affecting package shim for versions less than 15.8-1

CVE-2023-40550 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CLSA-2024-1724271309 shim: Fix of 4 CVEs

Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves:...