Description
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | shim | 0.8-0ubuntu2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | shim +3 | 0.7-8.el7_0 | RHSA-2014:1801 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | shim | 0.9-1.1 | openSUSE-SU-2024:10091-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | shim +2 | 0.7-8.0.1.el7_0 | ELSA-2014-1801 |
Advisories 3
- RHSA-2014:1801 Red Hat Security Advisory: shim security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- openSUSE-SU-2024:10091-1 shim-0.9-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2014-1801 Moderate: shim security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 5, 2014
References
- [oss-security] 20141013 shim RCE mailing-list
- 70407 vdb-entry
- RHSA-2014:1801 vendor-advisory
- shim-cve20143675-dos(96981) vdb-entry