CVE-2023-5342

MEDIUM

Red Hat Enterprise Linux 7-10 - Use of Expired Secure Boot CA Certificate

Title source: llm
STIX 2.1

Description

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-5342
Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2388707

Scores

CVSS v3 4.1
EPSS 0.0001
EPSS Percentile 0.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-324
Status published
Products (4)
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 7
Red Hat/Red Hat Enterprise Linux 8
Red Hat/Red Hat Enterprise Linux 9
Published Aug 14, 2025
Tracked Since Feb 18, 2026