CVE-2023-40550

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2024:1834
https://access.redhat.com/errata/RHSA-2024:1835
https://access.redhat.com/errata/RHSA-2024:1873
https://access.redhat.com/errata/RHSA-2024:1876
https://access.redhat.com/errata/RHSA-2024:1883
https://access.redhat.com/errata/RHSA-2024:1902
https://access.redhat.com/errata/RHSA-2024:1903
https://access.redhat.com/errata/RHSA-2024:1959
https://access.redhat.com/errata/RHSA-2024:2086
https://access.redhat.com/security/cve/CVE-2023-40550	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2259915	Issue Tracking Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:1834
https://access.redhat.com/errata/RHSA-2024:1835
https://access.redhat.com/errata/RHSA-2024:1873
https://access.redhat.com/errata/RHSA-2024:1876
https://access.redhat.com/errata/RHSA-2024:1883
https://access.redhat.com/errata/RHSA-2024:1902
https://access.redhat.com/errata/RHSA-2024:1903
https://access.redhat.com/errata/RHSA-2024:1959
https://access.redhat.com/errata/RHSA-2024:2086
https://access.redhat.com/security/cve/CVE-2023-40550	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2259915	Issue Tracking Vendor Advisory
https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html

Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:39:::::::*
	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*

History

21 Nov 2024, 08:19

Type	Values Removed	Values Added
References		() https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html -
References	~~() https://access.redhat.com/errata/RHSA-2024:1834 -~~	() https://access.redhat.com/errata/RHSA-2024:1834 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1835 -~~	() https://access.redhat.com/errata/RHSA-2024:1835 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1873 -~~	() https://access.redhat.com/errata/RHSA-2024:1873 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1876 -~~	() https://access.redhat.com/errata/RHSA-2024:1876 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1883 -~~	() https://access.redhat.com/errata/RHSA-2024:1883 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1902 -~~	() https://access.redhat.com/errata/RHSA-2024:1902 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1903 -~~	() https://access.redhat.com/errata/RHSA-2024:1903 -
References	~~() https://access.redhat.com/errata/RHSA-2024:1959 -~~	() https://access.redhat.com/errata/RHSA-2024:1959 -
References	~~() https://access.redhat.com/errata/RHSA-2024:2086 -~~	() https://access.redhat.com/errata/RHSA-2024:2086 -
References	~~() https://access.redhat.com/security/cve/CVE-2023-40550 - Vendor Advisory~~	() https://access.redhat.com/security/cve/CVE-2023-40550 - Vendor Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=2259915 - Issue Tracking, Vendor Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=2259915 - Issue Tracking, Vendor Advisory

16 Sep 2024, 19:16

Type	Values Removed	Values Added
References	~~{'url': 'https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html', 'source': 'secalert@redhat.com'}~~

10 Jun 2024, 18:15

Type	Values Removed	Values Added
References		() https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html -

29 Apr 2024, 14:15

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2024:2086 -

25 Apr 2024, 14:15

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2024:1902 - () https://access.redhat.com/errata/RHSA-2024:1903 - () https://access.redhat.com/errata/RHSA-2024:1959 -

18 Apr 2024, 05:15

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2024:1834 - () https://access.redhat.com/errata/RHSA-2024:1835 - () https://access.redhat.com/errata/RHSA-2024:1873 - () https://access.redhat.com/errata/RHSA-2024:1876 - () https://access.redhat.com/errata/RHSA-2024:1883 -

05 Feb 2024, 21:38

Type	Values Removed	Values Added
CPE		cpe:2.3:o:redhat:enterprise_linux:8.0:::::::* cpe:2.3:a:redhat:shim:::::::: cpe:2.3:o:redhat:enterprise_linux:9.0:::::::* cpe:2.3:o:fedoraproject:fedora:39:::::::*
First Time		Fedoraproject Redhat enterprise Linux Fedoraproject fedora Redhat shim Redhat
References	~~() https://access.redhat.com/security/cve/CVE-2023-40550 -~~	() https://access.redhat.com/security/cve/CVE-2023-40550 - Vendor Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=2259915 -~~	() https://bugzilla.redhat.com/show_bug.cgi?id=2259915 - Issue Tracking, Vendor Advisory
Summary		(es) Se encontró un fallo de lectura fuera de los límites en Shim cuando intentó validar la información SBAT. Este problema puede exponer datos confidenciales durante la fase de inicio del sistema.

29 Jan 2024, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-01-29 17:15

Updated : 2024-11-21 08:19

NVD link : CVE-2023-40550

Mitre link : CVE-2023-40550

CVE.ORG link : CVE-2023-40550

JSON object : View

Products Affected

redhat

enterprise_linux
shim

fedoraproject

fedora

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2023-40550", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2024-01-29T17:15:08.773", "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:1834", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1835", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1873", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1876", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1883", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1902", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1903", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1959", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2086", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-40550", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259915", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1834", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1835", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1873", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1876", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1883", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1902", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1903", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1959", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2086", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-40550", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259915", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-125"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase."}, {"lang": "es", "value": "Se encontr\u00f3 un fallo de lectura fuera de los l\u00edmites en Shim cuando intent\u00f3 validar la informaci\u00f3n SBAT. Este problema puede exponer datos confidenciales durante la fase de inicio del sistema."}], "lastModified": "2024-11-21T08:19:42.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01639865-3664-4034-BCFB-F4E09AF37F28", "versionEndExcluding": "15.8"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}

5.5 /10