Red Hat Security AdvisoryRHSA-2014:1801
shim security update
Released 2014-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) mokutil-0.7-8.el7_0, shim-0.7-8.el7_0, shim-signed-0.7-8.el7_0 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) mokutil-0.7-8.el7_0, shim-0.7-8.el7_0, shim-signed-0.7-8.el7_0 +1
- Red Hat Enterprise Linux Server (v. 7) mokutil-0.7-8.el7_0, shim-0.7-8.el7_0, shim-signed-0.7-8.el7_0 +1
- Red Hat Enterprise Linux Workstation (v. 7) mokutil-0.7-8.el7_0, shim-0.7-8.el7_0, shim-signed-0.7-8.el7_0 +1
Fixes 3 records
Priority MEDIUM 41
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05232 · Published 2014-10-22 · Fixed CWE-787
Priority LOW 38
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02745 · Published 2014-10-22 · Fixed
Priority LOW 28
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02612 · Published 2014-10-22 · Fixed CWE-125
