CVE-2014-3677 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-3677 Interim 1 41 2025-11-05T05:06:16Z current 2021-05-30T13:21:27Z 2025-11-05T05:06:16Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-3677 Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2014-December/001107.html E-Mail link for SUSE-SU-2014:1619-1 https://lists.suse.com/pipermail/sle-security-updates/2015-January/001162.html E-Mail link for SUSE-SU-2015:0076-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed gnu-efi-3.0u-0.7.2 shim-0.7-14.2 shim-0.7.318.81ee561d-0.9.2 shim-0.9-1.1 shim-0.9-2.14 shim-0.9-20.3 shim-0.9-23.14 shim-14-25.6.1 shim-14-5.8 shim-14-lp150.7.3 shim-14-lp152.3.1 shim-15+git47-1.5 shim-15+git47-3.13.1 shim-15+git47-3.3.1 shim-15.4-2.1 shim-15.4-4.7.1 shim-15.7-11.2 shim-15.7-150300.4.16.1 shim-15.8-150300.4.20.2 shim-15.8-150300.4.23.1 shim-15.8-160000.2.2 shim-15.8-slfo.1.1_3.2 shim-susesigned-15+git47-3.7.1 shim-susesigned-15.4-3.10.1 shim-0.7.318.81ee561d-0.9.2 as a component of SUSE Linux Enterprise Desktop 11 SP3 shim-0.7-14.2 as a component of SUSE Linux Enterprise Desktop 12 shim-0.9-2.14 as a component of SUSE Linux Enterprise Desktop 12 SP1 shim-0.9-20.3 as a component of SUSE Linux Enterprise Desktop 12 SP2 shim-0.9-23.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 shim-0.9-23.14 as a component of SUSE Linux Enterprise Desktop 12 SP4 shim-14-25.6.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 shim-15+git47-3.13.1 as a component of SUSE Linux Enterprise Micro 5.0 shim-15.4-4.7.1 as a component of SUSE Linux Enterprise Micro 5.1 shim-15.4-4.7.1 as a component of SUSE Linux Enterprise Micro 5.2 shim-15.4-4.7.1 as a component of SUSE Linux Enterprise Micro 5.3 shim-15.4-4.7.1 as a component of SUSE Linux Enterprise Micro 5.4 shim-15.7-150300.4.16.1 as a component of SUSE Linux Enterprise Micro 5.5 shim-14-5.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 shim-15+git47-1.5 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 shim-15+git47-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 shim-15.4-2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 shim-susesigned-15+git47-3.7.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 shim-15.4-4.7.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 shim-susesigned-15.4-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 shim-15.7-150300.4.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 shim-susesigned-15.4-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 shim-15.8-150300.4.20.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 shim-susesigned-15.4-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 shim-15.8-150300.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 shim-susesigned-15.4-3.10.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 gnu-efi-3.0u-0.7.2 as a component of SUSE Linux Enterprise Server 11 SP3 shim-0.7.318.81ee561d-0.9.2 as a component of SUSE Linux Enterprise Server 11 SP3 gnu-efi-3.0u-0.7.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA shim-0.7.318.81ee561d-0.9.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA shim-0.7.318.81ee561d-0.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 shim-0.7-14.2 as a component of SUSE Linux Enterprise Server 12 shim-0.9-2.14 as a component of SUSE Linux Enterprise Server 12 SP1 shim-0.9-20.3 as a component of SUSE Linux Enterprise Server 12 SP2 shim-0.9-23.14 as a component of SUSE Linux Enterprise Server 12 SP3 shim-0.9-23.14 as a component of SUSE Linux Enterprise Server 12 SP4 shim-14-25.6.1 as a component of SUSE Linux Enterprise Server 12 SP5 shim-15.8-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 gnu-efi-3.0u-0.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 shim-0.7.318.81ee561d-0.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 shim-14-25.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gnu-efi-3.0u-0.7.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 shim-15.7-11.2 as a component of SUSE Linux Micro 6.0 shim-15.8-slfo.1.1_3.2 as a component of SUSE Linux Micro 6.1 shim-14-lp150.7.3 as a component of openSUSE Leap 15.0 shim-14-lp152.3.1 as a component of openSUSE Leap 15.2 shim-15.4-2.1 as a component of openSUSE Leap 15.3 shim-15.4-4.7.1 as a component of openSUSE Leap 15.4 shim-0.9-1.1 as a component of openSUSE Tumbleweed Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption. CVE-2014-3677 SUSE Linux Enterprise Desktop 11 SP3:shim-0.7.318.81ee561d-0.9.2 SUSE Linux Enterprise Desktop 12:shim-0.7-14.2 SUSE Linux Enterprise Desktop 12 SP1:shim-0.9-2.14 SUSE Linux Enterprise Desktop 12 SP2:shim-0.9-20.3 SUSE Linux Enterprise Desktop 12 SP3:shim-0.9-23.14 SUSE Linux Enterprise Desktop 12 SP4:shim-0.9-23.14 SUSE Linux Enterprise High Performance Computing 12 SP5:shim-14-25.6.1 SUSE Linux Enterprise Micro 5.0:shim-15+git47-3.13.1 SUSE Linux Enterprise Micro 5.1:shim-15.4-4.7.1 SUSE Linux Enterprise Micro 5.2:shim-15.4-4.7.1 SUSE Linux Enterprise Micro 5.3:shim-15.4-4.7.1 SUSE Linux Enterprise Micro 5.4:shim-15.4-4.7.1 SUSE Linux Enterprise Micro 5.5:shim-15.7-150300.4.16.1 SUSE Linux Enterprise Module for Basesystem 15:shim-14-5.8 SUSE Linux Enterprise Module for Basesystem 15 SP1:shim-15+git47-1.5 SUSE Linux Enterprise Module for Basesystem 15 SP2:shim-15+git47-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:shim-15.4-2.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:shim-susesigned-15+git47-3.7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:shim-15.4-4.7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:shim-15.7-150300.4.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:shim-15.8-150300.4.20.2 SUSE Linux Enterprise Module for Basesystem 15 SP6:shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:shim-15.8-150300.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Server 11 SP3:gnu-efi-3.0u-0.7.2 SUSE Linux Enterprise Server 11 SP3:shim-0.7.318.81ee561d-0.9.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:gnu-efi-3.0u-0.7.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:shim-0.7.318.81ee561d-0.9.2 SUSE Linux Enterprise Server 11 SP4:shim-0.7.318.81ee561d-0.9.2 SUSE Linux Enterprise Server 12:shim-0.7-14.2 SUSE Linux Enterprise Server 12 SP1:shim-0.9-2.14 SUSE Linux Enterprise Server 12 SP2:shim-0.9-20.3 SUSE Linux Enterprise Server 12 SP3:shim-0.9-23.14 SUSE Linux Enterprise Server 12 SP4:shim-0.9-23.14 SUSE Linux Enterprise Server 12 SP5:shim-14-25.6.1 SUSE Linux Enterprise Server 16.0:shim-15.8-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnu-efi-3.0u-0.7.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:shim-0.7.318.81ee561d-0.9.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:shim-14-25.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:gnu-efi-3.0u-0.7.2 SUSE Linux Micro 6.0:shim-15.7-11.2 SUSE Linux Micro 6.1:shim-15.8-slfo.1.1_3.2 openSUSE Leap 15.0:shim-14-lp150.7.3 openSUSE Leap 15.2:shim-14-lp152.3.1 openSUSE Leap 15.3:shim-15.4-2.1 openSUSE Leap 15.4:shim-15.4-4.7.1 openSUSE Tumbleweed:shim-0.9-1.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P