CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

UBUNTU-CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

Memory corruption

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption...

Heap overflow

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

CVE-2014-3677

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption...

UBUNTU-CVE-2014-3677

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption...

CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

CVE-2014-3677

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption...

CVE-2014-3676

CVE-2014-3676 (shim): Heap-based buffer overflow in parsing IPv6 addresses can allow remote code execution via a crafted IPv6 address supplied by a remote server (tftp:// DHCPv6 boot option). Related issues include an out-of-bounds write during MOK handling and an out-of-bounds read in DHCPv6 par...

CVE-2014-3675

CVE-2014-3675 (and related CVEs 2014-3676, 2014-3677) describe issues in the shim component used by multiple Linux distributions. The primary item (CVE-2014-3675) is an out-of-bounds read triggered by parsing DHCPv6 packets, which can lead to remote denial of service. Additional entries in the co...

CVE-2014-3677

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption...

CVE-2014-3675

Shim allows remote attackers to cause a denial of service out-of-bounds read via a crafted DHCPv6 packet...

CVE-2014-3677

CVE-2014-3677 affects shim, where an out-of-bounds memory write in processing user-provided MOK (Machine Owner Keys) lists could enable a local attacker to execute arbitrary code on the system. Public details in connected documents reference related CVEs (3675/3676) affecting IPv6 handling and MO...

CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."...

PT-2014-1836

Name of the Vulnerable Software and Affected Versions shim versions 0.7 Red Hat Enterprise Linux affected versions not specified Description The issue is related to a heap-based buffer overflow in Shim, allowing remote attackers to execute arbitrary code via a crafted IPv6 address, specifically...

PT-2014-1837

Name of the Vulnerable Software and Affected Versions shim versions 0.7 shim-debuginfo versions 0.7 shim-signed versions 0.7 shim-unsigned versions 0.7 mokutil version 0.7 Description The issue affects the confidentiality, integrity, and availability of protected information in Red Hat Enterprise...

PT-2014-1835

Name of the Vulnerable Software and Affected Versions shim versions 0.7 shim-debuginfo versions 0.7 shim-unsigned versions 0.7 shim-signed versions 0.7 mokutil version 0.7 Description The issue affects the shim package in Red Hat Enterprise Linux, allowing remote attackers to cause a denial of...