Vulnerability in Red Hat Shim

CVE-2014-3677

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.

EPSS: 0.027 (84.7th percentile) — read the EPSS interpretation.

Affected products

Redhat Shim
N/a — versions n/a

Public proof-of-concept exploits

c-skills/CVEs

References

secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Broken Link)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2014-3677?: CVE-2014-3677 is a vulnerability in Red Hat Shim. Published 2014-10-22.
Is CVE-2014-3677 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.