CVE-2014-3676

High

Published: 22/10/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2014-3676 involves a heap-based buffer overflow in Shim that allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the 'tftp:// DHCPv6 boot option.'

Risk Assessment

Attackers may exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update the Shim software to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Shim

CVE-2014-3677High
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.

Original NVD description (English source)

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."