CVE-2023-5342

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-5342
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.

4.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2023-5342
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2aa28a4cfc
https://bugzilla.redhat.com/show_bug.cgi?id=2198977
https://bugzilla.redhat.com/show_bug.cgi?id=2388707
Configurations

No configuration.

History

15 Aug 2025, 12:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.1
References
  • () https://access.redhat.com/security/cve/CVE-2023-5342 -
  • () https://bodhi.fedoraproject.org/updates/FEDORA-2024-2aa28a4cfc -
  • () https://bugzilla.redhat.com/show_bug.cgi?id=2198977 -
  • () https://bugzilla.redhat.com/show_bug.cgi?id=2388707 -
CWE CWE-324
Summary (en) Rejected reason: The original vulnerability was not valid. (en) The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.

14 Aug 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-14 13:15

Updated : 2025-08-15 13:13

NVD link : CVE-2023-5342

Mitre link : CVE-2023-5342

CVE.ORG link : CVE-2023-5342

JSON object : View

Products Affected

No product.

CWE
CWE-324

Use of a Key Past its Expiration Date