CVE-2014-3675

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted...

5.0 MediumFix available

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

Exploit likelihood

2.61%Up 1.4 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

Record: CVE-2014-3675
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

Record: CVE-2014-3675
Updated: 2026-11-02

EUVDEUVD-2014-3623 No score

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

Record: EUVD-2014-3623
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4w72-8qcf-2x8f No score

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted...

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

Record: GHSA-4w72-8qcf-2x8f
Weakness: CWE-125
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10091-1 No score

shim-0.9-1.1 on GA media

These are all security issues fixed in the shim-0.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10091-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3675 No score

Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

Record: UBUNTU-CVE-2014-3675
Updated: 2026-11-02

Affected products

redhat shim

Affected packages

Affected packages
Package	Affected	Fixed
`mokutil` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`mokutil` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0

Show 12 moreShow less

Affected packages
Package	Affected	Fixed
`mokutil` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`mokutil` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Ubuntu:14.04:LTS	before 0.8-0ubuntu2, plus listed versions 0.4-0ubuntu4	0.8-0ubuntu2
`shim` openSUSE:Tumbleweed	before 0.9-1.1	0.9-1.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3675 is a medium vulnerability (CVSS 5.0) in Redhat Shim, published October 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in mokutil 0:0.7-8.el7_0.

References

Show 18 moreShow less