VYPR

rpm package

suse/shim&distro=SUSE Linux Micro 6.0

pkg:rpm/suse/shim&distro=SUSE%20Linux%20Micro%206.0

Vulnerabilities (7)

  • CVE-2024-2312Apr 5, 2024
    affected < 16.1-1.1fixed 16.1-1.1

    GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

  • CVE-2023-40551Jan 29, 2024
    affected < 15.8-1.1fixed 15.8-1.1

    A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.

  • CVE-2023-40546Jan 29, 2024
    affected < 15.8-1.1fixed 15.8-1.1

    A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it,

  • CVE-2023-40549Jan 29, 2024
    affected < 15.8-1.1fixed 15.8-1.1

    An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

  • CVE-2023-40550Jan 29, 2024
    affected < 15.8-1.1fixed 15.8-1.1

    An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.

  • CVE-2023-40548Jan 29, 2024
    affected < 15.8-1.1fixed 15.8-1.1

    A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer

  • CVE-2023-40547Jan 25, 2024
    affected < 15.8-1.1fixed 15.8-1.1

    A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitiv