PT-2014-1836 · Red Hat+2 · Red Hat+2
Publicado
2014-10-22
·
Atualizado
2024-06-15
·
CVE-2014-3676
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
shim versions 0.7
Red Hat Enterprise Linux (affected versions not specified)
Description
The issue is related to a heap-based buffer overflow in Shim, allowing remote attackers to execute arbitrary code via a crafted IPv6 address, specifically with the "tftp:// DHCPv6 boot option." Multiple vulnerabilities in the shim package of Red Hat Enterprise Linux can be exploited remotely, potentially leading to disruptions in confidentiality, integrity, and availability of protected information.
Recommendations
For shim version 0.7, consider disabling the vulnerable function related to the "tftp:// DHCPv6 boot option" until a patch is available.
For Red Hat Enterprise Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Out of bounds Read
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Red Hat
Suse