Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-28737

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.

Published

2023-07-20T01:15:10.473

Last Modified

2024-11-21T06:57:50.197

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	redhat	shim	< 15.6	Yes

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737 Third Party Advisory ([email protected])
https://www.openwall.com/lists/oss-security/2022/06/07/5 Mailing List, Third Party Advisory ([email protected])
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openwall.com/lists/oss-security/2022/06/07/5 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)