CVEvulnerability
CVE-2023-5342
4.1 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-324
Description
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.
Related
Weakness · CWE (1)
- CWE-324 Use of a Key Past its Expiration Date weakness
References
- https://access.redhat.com/security/cve/CVE-2023-5342 access.redhat.com
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-2aa28a4cfc bodhi.fedoraproject.org
- https://bugzilla.redhat.com/show_bug.cgi?id=2198977 bugzilla.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2388707 bugzilla.redhat.com