CVE-2014-3675 – shim: out-of-bounds memory read flaw in DHCPv6 packet processing

https://notcve.org/view.php?id=CVE-2014-3675

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet. Shim permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) a través de un paquete DHCPv6 manipulado. An out-of-bounds memory read flaw was found in the way shim parsed certain IPv6 packets. A specially crafted DHCPv6 packet could possibly cause shim to crash, preventing the system from booting if IPv6 booting was enabled. • http://rhn.redhat.com/errata/RHSA-2014-1801.html http://www.openwall.com/lists/oss-security/2014/10/13/4 http://www.securityfocus.com/bid/70407 https://exchange.xforce.ibmcloud.com/vulnerabilities/96981 https://access.redhat.com/security/cve/CVE-2014-3675 https://bugzilla.redhat.com/show_bug.cgi?id=1148230 • CWE-125: Out-of-bounds Read •