Medium severity5.1NVD Advisory· Published Jan 29, 2024· Updated Jun 17, 2026

CVE-2023-40551

Description

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Red Hat Enterprise Linux 9.0 Extended Update Supportv5
cpe:/a:redhat:rhel_eus:9.0::appstream
Range: 0:15.8-2.el9
Red Hat/Enterprise Linux Servercpe-rescue3 versions
cpe:/o:redhat:enterprise_linux:7::server+ 2 more
- cpe:/o:redhat:enterprise_linux:7::serverrange: 0:15.8-1.el7
- cpe:/o:redhat:enterprise_linux:8::baseosrange: 0:15.8-4.el8_9
- cpe:/o:redhat:enterprise_linux:9::baseosrange: 0:15.8-4.el9_3
Red Hat/Enterprise Linux Update Services For Sap Solutionscpe-rescue2 versions
cpe:/o:redhat:rhel_e4s:8.4::baseos+ 1 more
- cpe:/o:redhat:rhel_e4s:8.4::baseosrange: 0:15.8-2.el8_4
- cpe:/o:redhat:rhel_tus:8.2::baseosrange: 0:15.8-2.el8_2
Red Hat/Red Hat Enterprise Linux 8.6 Extended Update Supportv5
cpe:/o:redhat:rhel_eus:8.6::baseos
Range: 0:15.8-2.el8_6
Red Hat/Red Hat Enterprise Linux 8.8 Extended Update Supportv5
cpe:/o:redhat:rhel_eus:8.8::baseos
Range: 0:15.8-2.el8
Red Hat/Red Hat Enterprise Linux 9.2 Extended Update Supportv5
cpe:/o:redhat:rhel_eus:9.2::baseos
Range: 0:15.8-3.el9_2
Red Hat/Shimllm-fuzzy
osv-coords29 versions
pkg:rpm/almalinux/shim-aa64 pkg:rpm/almalinux/shim-ia32 pkg:rpm/almalinux/shim-x64 pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%20Micro%205.4 pkg:rpm/suse/pcr-oracle&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/shim&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/shim&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/shim&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/shim&distro=SUSE%20Manager%20Server%204.3
< 15.8-4.el8_9.alma.1+ 28 more
- (no CPE)range: < 15.8-4.el8_9.alma.1
- (no CPE)range: < 15.8-4.el8_9.alma.1
- (no CPE)range: < 15.8-4.el8_9.alma.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 0.4.6-2.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150100.3.38.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-25.30.1
- (no CPE)range: < 15.8-150100.3.38.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-25.30.1
- (no CPE)range: < 15.8-150100.3.38.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-1.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2023-40551nvdVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
access.redhat.com/errata/RHSA-2024:1834nvd
access.redhat.com/errata/RHSA-2024:1835nvd
access.redhat.com/errata/RHSA-2024:1873nvd
access.redhat.com/errata/RHSA-2024:1876nvd
access.redhat.com/errata/RHSA-2024:1883nvd
access.redhat.com/errata/RHSA-2024:1902nvd
access.redhat.com/errata/RHSA-2024:1903nvd
access.redhat.com/errata/RHSA-2024:1959nvd
access.redhat.com/errata/RHSA-2024:2086nvd
lists.debian.org/debian-lts-announce/2024/05/msg00009.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.332
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000