CVE-2023-40546

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

History

29 Apr 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:2086 -

25 Apr 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:1902 -
  • () https://access.redhat.com/errata/RHSA-2024:1903 -
  • () https://access.redhat.com/errata/RHSA-2024:1959 -

18 Apr 2024, 04:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:1873 -
  • () https://access.redhat.com/errata/RHSA-2024:1876 -
  • () https://access.redhat.com/errata/RHSA-2024:1883 -

16 Apr 2024, 16:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:1834 -
  • () https://access.redhat.com/errata/RHSA-2024:1835 -

05 Feb 2024, 20:06

Type Values Removed Values Added
References () https://access.redhat.com/security/cve/CVE-2023-40546 - () https://access.redhat.com/security/cve/CVE-2023-40546 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2241796 - () https://bugzilla.redhat.com/show_bug.cgi?id=2241796 - Issue Tracking, Vendor Advisory
CVSS v2 : unknown
v3 : 6.2
v2 : unknown
v3 : 5.5
First Time Redhat
Redhat enterprise Linux
Redhat shim
Fedoraproject fedora
Fedoraproject
CPE cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

29 Jan 2024, 17:39

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-29 17:15

Updated : 2024-04-29 14:15


NVD link : CVE-2023-40546

Mitre link : CVE-2023-40546

CVE.ORG link : CVE-2023-40546


JSON object : View

Products Affected

redhat

  • shim
  • enterprise_linux

fedoraproject

  • fedora
CWE
CWE-476

NULL Pointer Dereference