CVE-2023-40550

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

History

29 Apr 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:2086 -

25 Apr 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:1902 -
  • () https://access.redhat.com/errata/RHSA-2024:1903 -
  • () https://access.redhat.com/errata/RHSA-2024:1959 -

18 Apr 2024, 05:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:1873 -
  • () https://access.redhat.com/errata/RHSA-2024:1876 -
  • () https://access.redhat.com/errata/RHSA-2024:1883 -

16 Apr 2024, 16:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:1834 -
  • () https://access.redhat.com/errata/RHSA-2024:1835 -

05 Feb 2024, 21:38

Type Values Removed Values Added
CPE cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
First Time Redhat
Redhat enterprise Linux
Redhat shim
Fedoraproject fedora
Fedoraproject
References () https://access.redhat.com/security/cve/CVE-2023-40550 - () https://access.redhat.com/security/cve/CVE-2023-40550 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2259915 - () https://bugzilla.redhat.com/show_bug.cgi?id=2259915 - Issue Tracking, Vendor Advisory

29 Jan 2024, 17:39

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-29 17:15

Updated : 2024-04-29 14:15


NVD link : CVE-2023-40550

Mitre link : CVE-2023-40550

CVE.ORG link : CVE-2023-40550


JSON object : View

Products Affected

redhat

  • shim
  • enterprise_linux

fedoraproject

  • fedora
CWE
CWE-125

Out-of-bounds Read