Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in "shim" ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 6
-
High 8.3
Shim: rce in http boot support may lead to secure boot bypass
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-…
-
High 7.4
Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to…
-
Medium 6.2
Shim: out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the forma…
-
Medium 6.2
Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.
-
Medium 5.5
Shim: out-of-bound read in verify_buffer_sbat()
An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.
-
Medium 5.1
Shim: out of bounds read when parsing mz binaries
A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.
Revision history
-
#10
Neue Updates von SUSE aufgenommen
-
#9
Neue Updates von Dell aufgenommen
-
#8
Neue Updates von Debian aufgenommen
-
#7
Neue Updates von Oracle Linux aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Oracle Linux aufgenommen
-
#4
Neue Updates von Oracle Linux aufgenommen
-
#3
Neue Updates von SUSE und Red Hat aufgenommen
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory vom 2024-04-16
https://access.redhat.com/errata/RHSA-2024:1834
-
Red Hat Security Advisory vom 2024-04-16
https://access.redhat.com/errata/RHSA-2024:1835
-
Red Hat Security Advisory RHSA-2024:1873 vom 2024-04-18
https://access.redhat.com/errata/RHSA-2024:1873
-
Red Hat Security Advisory RHSA-2024:1883 vom 2024-04-18
https://access.redhat.com/errata/RHSA-2024:1883
-
Red Hat Security Advisory RHSA-2024:1876 vom 2024-04-18
https://access.redhat.com/errata/RHSA-2024:1876
-
Red Hat Security Advisory RHSA-2024:1903 vom 2024-04-18
https://access.redhat.com/errata/RHSA-2024:1903
-
Red Hat Security Advisory RHSA-2024:1902 vom 2024-04-18
https://access.redhat.com/errata/RHSA-2024:1902
-
SUSE Security Update SUSE-SU-2024:1368-1 vom 2024-04-22
https://lists.suse.com/pipermail/sle-security-updates/2024-April/018392.html
-
Red Hat Security Advisory RHSA-2024:1959 vom 2024-04-23
https://access.redhat.com/errata/RHSA-2024:1959
-
Oracle Linux Security Advisory ELSA-2024-1903 vom 2024-04-24
http://linux.oracle.com/errata/ELSA-2024-1903.html
-
Oracle Linux Security Advisory ELSA-2024-1902 vom 2024-04-26
https://linux.oracle.com/errata/ELSA-2024-1902.html
-
Red Hat Security Advisory RHSA-2024:2086 vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2086
-
Oracle Linux Security Advisory ELSA-2024-1959 vom 2024-05-03
https://linux.oracle.com/errata/ELSA-2024-1959.html
-
Debian Security Advisory DLA-3813 vom 2024-05-14
https://lists.debian.org/debian-lts-announce/2024/05/msg00009.html
-
Dell Security Advisory DSA-2024-422 vom 2024-10-10
https://www.dell.com/support/kbdoc/de-de/000234730/dsa-2024-422-security-update-for-dell-networker-vproxy-multiple-component-vulnerabilities
-
SUSE Security Update SUSE-SU-2025:20136-1 vom 2025-06-04
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021195.html