Lucene search
K

6 matches found

NVD
NVD
added 2023/07/20 1:15 a.m.19 views

CVE-2022-28737

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

7.8CVSS7.4AI score0.00332EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/07/20 1:15 a.m.41 views

CVE-2022-28737

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

7.8CVSS7.1AI score0.00332EPSS
Exploits0References3
Prion
Prion
added 2023/07/20 1:15 a.m.17 views

Design/Logic Flaw

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

4.4CVSS8.8AI score0.00332EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/20 12:26 a.m.13 views

CVE-2022-28737 There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

6.5CVSS7.5AI score0.00332EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/07/20 12:26 a.m.17 views

CVE-2022-28737 There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

6.5CVSS8.3AI score0.00332EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/06/08 12:0 a.m.27 views

Oracle Linux 8 : shim (ELSA-2022-9465)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9465 advisory. 15.6-1.0.3 - Update shimx64.efi and shimia32.efi signed by Microsoft JIRA: OLDIS-16370 15.6-1.0.2 - Update to shim-unsigned v15.6.rc2 JIRA: OLDIS-16370 15.6-1.0...

7.8CVSS7AI score0.00332EPSS
Exploits0References2
Rows per page
Query Builder