Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/shim@15.8-4?arch=el9_3
purl pkg:rpm/redhat/shim@15.8-4?arch=el9_3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.8
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-2k5h-eehr-eufe
Aliases:
CVE-2023-40548
shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems There are no reported fixed by versions.
VCID-bk8q-vscb-1ba4
Aliases:
CVE-2023-40546
shim: Out-of-bounds read printing error messages There are no reported fixed by versions.
VCID-gjd2-6z4w-gkdn
Aliases:
CVE-2023-40549
shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file There are no reported fixed by versions.
VCID-ntsj-rnvk-y7fn
Aliases:
CVE-2023-40551
shim: out of bounds read when parsing MZ binaries There are no reported fixed by versions.
VCID-ux7y-c4pu-43ex
Aliases:
CVE-2023-40550
shim: Out-of-bound read in verify_buffer_sbat() There are no reported fixed by versions.
VCID-z8xq-mf7b-9fd8
Aliases:
CVE-2023-40547
shim: RCE in http boot support may lead to Secure Boot bypass There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:52:30.419202+00:00 RedHat Importer Affected by VCID-2k5h-eehr-eufe https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40548.json 38.0.0
2026-04-01T13:50:05.453341+00:00 RedHat Importer Affected by VCID-ntsj-rnvk-y7fn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40551.json 38.0.0
2026-04-01T13:50:05.102281+00:00 RedHat Importer Affected by VCID-ux7y-c4pu-43ex https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40550.json 38.0.0
2026-04-01T13:50:04.260281+00:00 RedHat Importer Affected by VCID-gjd2-6z4w-gkdn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40549.json 38.0.0
2026-04-01T13:50:03.943435+00:00 RedHat Importer Affected by VCID-bk8q-vscb-1ba4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40546.json 38.0.0
2026-04-01T13:50:03.600607+00:00 RedHat Importer Affected by VCID-z8xq-mf7b-9fd8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-40547.json 38.0.0