Vulnerabilities > CVE-2023-40546 - NULL Pointer Dereference vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
redhat
fedoraproject
CWE-476
NVD
Published: 2024-01-29
Updated: 2024-11-21

Summary

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

Vulnerable Configurations

Part Description Count
Application
Redhat
35
OS
Redhat
2
OS
Fedoraproject
1

Common Weakness Enumeration (CWE)

References