vulnerability

Alma Linux: CVE-2023-40548: Important: shim security update (Multiple Advisories)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
01/29/2024
Added
05/13/2024
Modified
01/28/2025

Description

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase.

Solution(s)

alma-upgrade-shim-aa64alma-upgrade-shim-ia32alma-upgrade-shim-x64

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today