Skip to content
OpenAdvisories
Unscored RHSA-2014:1801 3 CVEs

Red Hat Security Advisory: shim security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client mokutil 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client shim 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client shim-debuginfo 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client shim-signed 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client shim-unsigned 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode mokutil 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode shim 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode shim-debuginfo 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode shim-signed 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::computenode shim-unsigned 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server mokutil 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server shim 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server shim-debuginfo 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server shim-signed 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server shim-unsigned 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation mokutil 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation shim 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation shim-debuginfo 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation shim-signed 0:0.7-8.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation shim-unsigned 0:0.7-8.el7_0

Vulnerabilities 3

  • Unscored —
    CVE-2014-3675

    Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

    shim Ubuntu
  • Unscored —
    CVE-2014-3676

    Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, relate…

    shim Ubuntu
  • Unscored —
    CVE-2014-3677

    Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which trigger…

    shim Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1148230
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1148231
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1148232
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1801.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3675
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3675
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3675
  • report
    https://access.redhat.com/security/cve/CVE-2014-3676
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3676
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3676
  • report
    https://access.redhat.com/security/cve/CVE-2014-3677
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3677
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3677