Launchpad.net

CVE 2014-3677

Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.

CVE-2014-3677 (Candidate) is related to these bugs:

Bug #1297069: During the installation under UEFI mode, "Could not open \EFI\BOOT\fallback.efi: 14" shows after passed the BIOS phase.

		In	Importance	Status
1297069	During the installation under UEFI mode, "Could not open \EFI\BOOT\fallback.efi: 14" shows after passed the BIOS phase.	shim (Ubuntu)	Medium	Fix Released
1297069	During the installation under UEFI mode, "Could not open \EFI\BOOT\fallback.efi: 14" shows after passed the BIOS phase.	OEM Priority Project	Undecided	Fix Released
1297069	During the installation under UEFI mode, "Could not open \EFI\BOOT\fallback.efi: 14" shows after passed the BIOS phase.	shim (Ubuntu Trusty)	Medium	Triaged
1297069	During the installation under UEFI mode, "Could not open \EFI\BOOT\fallback.efi: 14" shows after passed the BIOS phase.	OEM Priority Project trusty	Undecided	New

Bug #1384973: shim prints "Booting in insecure mode" when booting without SecureBoot enabled

		In	Importance	Status
1384973	shim prints "Booting in insecure mode" when booting without SecureBoot enabled	shim (Ubuntu)	High	Fix Released
1384973	shim prints "Booting in insecure mode" when booting without SecureBoot enabled	shim-signed (Ubuntu)	High	Fix Released
1384973	shim prints "Booting in insecure mode" when booting without SecureBoot enabled	shim (Ubuntu Vivid)	High	Fix Released
1384973	shim prints "Booting in insecure mode" when booting without SecureBoot enabled	shim-signed (Ubuntu Vivid)	High	Fix Released

See the

CVE page on Mitre.org for more details.