CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a...

7.5 HighFix available

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

Exploit likelihood

5.23%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

Record: CVE-2014-3676
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

Record: CVE-2014-3676
Updated: 2026-11-02

EUVDEUVD-2014-3624 No score

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

Record: EUVD-2014-3624
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pg7r-qqvh-q4vw No score

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a...

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

Record: GHSA-pg7r-qqvh-q4vw
Weakness: CWE-787
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10091-1 No score

shim-0.9-1.1 on GA media

These are all security issues fixed in the shim-0.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10091-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3676 No score

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

Record: UBUNTU-CVE-2014-3676
Updated: 2026-11-02

Affected products

redhat shim

Affected packages

Affected packages
Package	Affected	Fixed
`mokutil` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::client	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`mokutil` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::computenode	before 0:0.7-8.el7_0	0:0.7-8.el7_0

Show 12 moreShow less

Affected packages
Package	Affected	Fixed
`mokutil` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::server	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`mokutil` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-signed` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim-unsigned` Red Hat:enterprise_linux:7::workstation	before 0:0.7-8.el7_0	0:0.7-8.el7_0
`shim` Ubuntu:14.04:LTS	before 0.8-0ubuntu2, plus listed versions 0.4-0ubuntu4	0.8-0ubuntu2
`shim` openSUSE:Tumbleweed	before 0.9-1.1	0.9-1.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3676 is a high vulnerability (CVSS 7.5) in Redhat Shim, published October 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.23%, the 92nd percentile. Fixed in mokutil 0:0.7-8.el7_0.

References

Show 19 moreShow less