CVE-2014-3675

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-3675
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2014-1801.html Broken Link
http://www.openwall.com/lists/oss-security/2014/10/13/4 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/70407 Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/96981 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*
History

07 Apr 2021, 13:42

Type Values Removed Values Added
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2014-1801.html - Vendor Advisory (REDHAT) http://rhn.redhat.com/errata/RHSA-2014-1801.html - Broken Link
References (MLIST) http://www.openwall.com/lists/oss-security/2014/10/13/4 - Exploit, Mailing List, Third Party Advisory (MLIST) http://www.openwall.com/lists/oss-security/2014/10/13/4 - Mailing List, Patch, Third Party Advisory
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:shim:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*		 cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*
Information

Published : 2014-10-22 14:55

Updated : 2023-12-10 11:31

NVD link : CVE-2014-3675

Mitre link : CVE-2014-3675

CVE.ORG link : CVE-2014-3675

JSON object : View

Products Affected

redhat

  • shim
CWE
CWE-125

Out-of-bounds Read