Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-40551


A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.


Published

2024-01-29T17:15:08.970

Last Modified

2024-11-21T08:19:42.337

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-125
  • Type: Primary
    CWE-125

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application redhat shim < 15.8 Yes
Operating System fedoraproject fedora 39 Yes
Operating System redhat enterprise_linux 8.0 Yes
Operating System redhat enterprise_linux 9.0 Yes

References