Security News > 2024 > February > Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux Distros
2024-02-07 13:33
The maintainers of shim have released version 15.8 to address six security flaws, including a critical bug that could pave the way for remote code execution under specific circumstances. Tracked as CVE-2023-40547 (CVSS score: 9.8), the vulnerability could be exploited to achieve a Secure Boot bypass. Bill Demirkapi of the Microsoft Security Response Center (MSRC) has been&
News URL
https://thehackernews.com/2024/02/critical-bootloader-vulnerability-in.html
Related news
- New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344) (source)
- New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits (source)
- Cisco fixes ClamAV vulnerability with available PoC and critical Meeting Management flaw (source)
- Zyxel CPE devices under attack via critical vulnerability without a patch (CVE-2024-40891) (source)
- Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-25 | CVE-2023-40547 | Unspecified vulnerability in Redhat Enterprise Linux and Shim A remote code execution vulnerability was found in Shim. high complexity redhat | 8.3 |