Cisco IOS XR DHCPv6 DoS

The remote Cisco device is running a version of Cisco IOS XR software that is affected by a denial of service vulnerability related to the incorrect handling of malformed DHCPv6 packets. TRUSTED...

Oracle Linux 7 : shim (ELSA-2014-1801)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1801 advisory. - out-of-bounds memory read flaw in DHCPv6 packet processing Resolves: CVE-2014-3675 - heap-based buffer overflow flaw in IPv6 address parsing Resolves...

shim security update

shim 0.7-8.0.1 - update Oracle Linux certificates Alexey Petrenko - replace securebootca.cer Alexey Petrenko 0.7-8 - out-of-bounds memory read flaw in DHCPv6 packet processing Resolves: CVE-2014-3675 - heap-based buffer overflow flaw in IPv6 address parsing Resolves: CVE-2014-3676 - memory...

RedHat Update for shim RHSA-2014:1801-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : shim (RHSA-2014:1801)

Updated shim packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

Moderate: Red Hat Security Advisory: shim security update

Updated shim packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

UBUNTU-CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

Heap overflow

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

Out-of-bounds

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

CVE-2014-3675

CVE-2014-3675 (and related CVEs 2014-3676, 2014-3677) describe issues in the shim component used by multiple Linux distributions. The primary item (CVE-2014-3675) is an out-of-bounds read triggered by parsing DHCPv6 packets, which can lead to remote denial of service. Additional entries in the co...

Cisco IOS Software DHCPv6 DoS (cisco-sa-20140924-dhcpv6)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the DHCP version 6 DHCPv6 implementation due to improper handling of DHCPv6 packets. A remote attacker can exploit this issue by sending specially crafte...

Cisco IOS XE Software DHCPv6 DoS (cisco-sa-20140924-dhcpv6)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCP version 6 DHCPv6 implementation due to improper handling of DHCPv6 packets. A remote attacker can exploit this issue by sending specially...

Memory corruption

Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows remote attackers to cause a denial of service memory consumption or device reload via malformed DHCPv6 packets, aka B...

CVE-2014-3359

Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows remote attackers to cause a denial of service memory consumption or device reload via malformed DHCPv6 packets, aka B...

CVE-2014-3359

CVE-2014-3359 describes a memory leak in Cisco IOS/IOS XE DHCPv6 server when handling malformed DHCPv6 packets, leading to denial of service (memory consumption or device reload). Affected Cisco IOS versions include 15.1–15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS...

Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability

A vulnerability in the DHCP version 6 DHCPv6 server implementation of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper parsing of malformed DHCPv6 packets. An attacker coul...