Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2014-3676

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

PublishedOct 22, 2014, 14:55

Published Bysecalert@redhat.com

Affected Versions

No affected versions found.

References

http://rhn.redhat.com/errata/RHSA-2014-1801.html
http://www.openwall.com/lists/oss-security/2014/10/13/4
http://www.securityfocus.com/bid/70409
https://exchange.xforce.ibmcloud.com/vulnerabilities/96988

Weakness Type

CWE-787

CVSS Metrics

Base Score

7.5

Vector String

AV:N/AC:L/Au:N/C:P/I:P/A:P

Base SeverityUnknown

Version

2.0

Attack Vector (AV)