Lucene search

K
suseSuseSUSE-SU-2014:1619-1
HistoryDec 11, 2014 - 7:04 p.m.

Security update for shim (important)

2014-12-1119:04:42
lists.opensuse.org
11

0.02 Low

EPSS

Percentile

89.0%

shim has been updated to fix three security issues:

   * OOB read access when parsing DHCPv6 packets (remote DoS)
     (CVE-2014-3675).
   * Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6
     boot option (RCE) (CVE-2014-3676).
   * Memory corruption when processing user provided MOK lists
     (CVE-2014-3677).

Security Issues:

   * CVE-2014-3675
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3675">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3675</a>&gt;
   * CVE-2014-3676
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3676">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3676</a>&gt;
   * CVE-2014-3677
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3677">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3677</a>&gt;

0.02 Low

EPSS

Percentile

89.0%