Skip to content
OpenAdvisories
Medium ELSA-2014-1801 3 CVEs

Moderate: shim security update (Oracle Linux 7)

Published Nov 5, 2014 · Updated Nov 5, 2014

Ecosystem: Oracle Linux

Summary

shim
[0.7-8.0.1]
- update Oracle Linux certificates (Alexey Petrenko)
- replace securebootca.cer (Alexey Petrenko)

[0.7-8]
- out-of-bounds memory read flaw in DHCPv6 packet processing
Resolves: CVE-2014-3675
- heap-based buffer overflow flaw in IPv6 address parsing
Resolves: CVE-2014-3676
- memory corruption flaw when processing Machine Owner Keys (MOKs)
Resolves: CVE-2014-3677

[0.7-7]
- Use the right key for ARM Aarch64.

[0.7-6]
- Preliminary build for ARM Aarch64.

shim-signed
[0.7-8.0.1]
- Oracle Linux certificates (Alexey Petrenko)

[0.7-8]
- out-of-bounds memory read flaw in DHCPv6 packet processing
Resolves: CVE-2014-3675
- heap-based buffer overflow flaw in IPv6 address parsing
Resolves: CVE-2014-3676
- memory corruption flaw when processing Machine Owner Keys (MOKs)
Resolves: CVE-2014-3677

[0.7-5.2]
- Get the right signatures on shim-redhat.efi
Related: rhbz#1064449

[0.7-5.1]
- Update for signed shim for RHEL 7
Resolves: rhbz#1064449

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 mokutil 0:0.7-8.0.1.el7_0
Oracle Linux · 7 shim 0:0.7-8.0.1.el7_0
Oracle Linux · 7 shim-unsigned 0:0.7-8.0.1.el7_0

Vulnerabilities 3

  • Unscored —
    CVE-2014-3675

    Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

    shim Ubuntu
  • Unscored —
    CVE-2014-3676

    Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, relate…

    shim Ubuntu
  • Unscored —
    CVE-2014-3677

    Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which trigger…

    shim Ubuntu