Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/shim@15.4-7~deb10u1
purl pkg:deb/debian/shim@15.4-7~deb10u1
Next non-vulnerable version 15.8-1~deb11u1
Latest non-vulnerable version 15.8-1~deb11u1
Risk 4.0
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-2k5h-eehr-eufe
Aliases:
CVE-2023-40548
shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
VCID-5sa4-gwdj-7ygc
Aliases:
CVE-2022-28737
Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
VCID-bk8q-vscb-1ba4
Aliases:
CVE-2023-40546
shim: Out-of-bounds read printing error messages
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
VCID-gjd2-6z4w-gkdn
Aliases:
CVE-2023-40549
shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
VCID-ntsj-rnvk-y7fn
Aliases:
CVE-2023-40551
shim: out of bounds read when parsing MZ binaries
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
VCID-ux7y-c4pu-43ex
Aliases:
CVE-2023-40550
shim: Out-of-bound read in verify_buffer_sbat()
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
VCID-z8xq-mf7b-9fd8
Aliases:
CVE-2023-40547
shim: RCE in http boot support may lead to Secure Boot bypass
15.8-1~deb11u1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T23:42:15.545489+00:00 Debian Oval Importer Affected by VCID-5sa4-gwdj-7ygc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:05:23.025777+00:00 Debian Oval Importer Affected by VCID-ntsj-rnvk-y7fn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:24:05.490029+00:00 Debian Oval Importer Affected by VCID-2k5h-eehr-eufe https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:04:14.987331+00:00 Debian Oval Importer Affected by VCID-z8xq-mf7b-9fd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:27:19.577516+00:00 Debian Oval Importer Affected by VCID-gjd2-6z4w-gkdn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:22:18.238319+00:00 Debian Oval Importer Affected by VCID-ux7y-c4pu-43ex https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:31:40.833119+00:00 Debian Oval Importer Affected by VCID-bk8q-vscb-1ba4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T23:17:01.218373+00:00 Debian Oval Importer Affected by VCID-5sa4-gwdj-7ygc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:41:28.965119+00:00 Debian Oval Importer Affected by VCID-ntsj-rnvk-y7fn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:01:17.597469+00:00 Debian Oval Importer Affected by VCID-2k5h-eehr-eufe https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:42:19.067707+00:00 Debian Oval Importer Affected by VCID-z8xq-mf7b-9fd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:12:21.014845+00:00 Debian Oval Importer Affected by VCID-gjd2-6z4w-gkdn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:08:44.853069+00:00 Debian Oval Importer Affected by VCID-ux7y-c4pu-43ex https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:18:45.760186+00:00 Debian Oval Importer Affected by VCID-bk8q-vscb-1ba4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T22:50:28.284818+00:00 Debian Oval Importer Affected by VCID-5sa4-gwdj-7ygc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:16:34.238375+00:00 Debian Oval Importer Affected by VCID-ntsj-rnvk-y7fn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:38:21.077355+00:00 Debian Oval Importer Affected by VCID-2k5h-eehr-eufe https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:20:12.468301+00:00 Debian Oval Importer Affected by VCID-z8xq-mf7b-9fd8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:58:39.864677+00:00 Debian Oval Importer Affected by VCID-gjd2-6z4w-gkdn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:57:52.876634+00:00 Debian Oval Importer Affected by VCID-ux7y-c4pu-43ex https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:10:48.396908+00:00 Debian Oval Importer Affected by VCID-bk8q-vscb-1ba4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0