CVE-2023-40547 (published 2024-01-25T15:54:23.102Z)
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.
Affected products: Vendor: n/a
Product: shim
Versions: 15.8