CVE-2023-40547
Public on 2024-01-24
Modified on 2024-01-30
Description
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise.
CVSS v3 Base Score
See breakdown
