CVE-2022-3409

🗓️ 27 Oct 2022 13:09:19Reported by OpenBMCType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 50 Views

Vulnerability in bmcweb of OpenBMC Project allows DoS. Overwrite on heap from long http header in multipart form without colon can cause DoS

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-3409	27 Oct 202216:28	–	circl
CNNVD	OpenBMC 缓冲区错误漏洞	27 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-3409 Unauthenticated out of bounds stack write in bmcweb	27 Oct 202213:09	–	cvelist
EUVD	EUVD-2022-42786	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3409	27 Oct 202213:15	–	nvd
Prion	Heap overflow	27 Oct 202213:15	–	prion
Positive Technologies	PT-2022-22001 · Openbmc · Openbmc	27 Oct 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-3409 Unauthenticated out of bounds stack write in bmcweb	27 Oct 202213:09	–	vulnrichment

NVD

Node

openbmc-project openbmcRange2.10.0–2.13.0

[
  {
    "vendor": "OpenBMC Project",
    "product": "OpenBMC",
    "versions": [
      {
        "version": "2.10",
        "status": "affected",
        "lessThan": "Release*",
        "versionType": "custom",
        "changes": [
          {
            "at": "2.13",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]