Unrated severityNVD Advisory· Published Oct 22, 2014· Updated Jun 17, 2026

CVE-2014-3676

Description

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Shim2 versions
cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:*range: >=0.3,<0.8
- (no CPE)
osv-coords
pkg:rpm/opensuse/shim&distro=openSUSE%20Tumbleweed
Range: < 0.9-1.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2014/10/13/4nvdExploitMailing List
www.securityfocus.com/bid/70409nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/96988nvdThird Party AdvisoryVDB Entry
rhn.redhat.com/errata/RHSA-2014-1801.htmlnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000