VendorsRed Hatshimany version
Vulnerabilities

Red Hat Shim any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

10CVEs
CVE-2023-40547
Shim: rce in http boot support may lead to secure boot bypass
Published 2024-01-25 · Modified
8.3EPSS 0.054
CVE-2022-28737
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables
Published 2023-07-20 · Modified
7.8EPSS 0.003
CVE-2014-3676
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
Published 2014-10-22 · Modified
7.5EPSS 0.052
CVE-2014-3677
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
Published 2014-10-22 · Modified
7.5EPSS 0.027
CVE-2023-40548
Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
Published 2024-01-29 · Modified
7.4EPSS 0.004
CVE-2023-40546
Shim: out-of-bounds read printing error messages
Published 2024-01-29 · Modified
6.2EPSS 0.004
CVE-2023-40549
Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
Published 2024-01-29 · Modified
6.2EPSS 0.004
CVE-2023-40550
Shim: out-of-bound read in verify_buffer_sbat()
Published 2024-01-29 · Modified
5.5EPSS 0.004
CVE-2023-40551
Shim: out of bounds read when parsing mz binaries
Published 2024-01-29 · Modified
5.1EPSS 0.004
CVE-2014-3675
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
Published 2014-10-22 · Modified
5.0EPSS 0.026