CVE-2023-37297 heap memory overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37297 heap memory overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37297

AMI MegaRAC SPx (BMC) is affected by a heap memory corruption vulnerability that can be triggered by an adjacent network. The vulnerability affects AMI MegaRAC SP-X family and is described across multiple sources as enabling an attacker to compromise confidentiality, integrity, and availability. ...

CVE-2023-37296 Stack-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37296

CVE-2023-37296 affects AMI MegaRAC SP-X BMC. The vulnerability enables an attacker to cause stack memory corruption over an adjacent network, with potential losses to confidentiality, integrity, and availability. Reported CVSS data indicate high risk (base score 8.8/8.3 in alternate vectors) with...

CVE-2023-37296 Stack-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37295

The CVE-2023-37295 entry concerns AMI MegaRAC SP-X BMC, where a heap memory corruption vulnerability can be triggered by an adjacent network. Affected component: MegaRAC SP-X firmware/BMC memory management. Impact is stated as potential loss of confidentiality, integrity, and availability. CVSS d...

CVE-2023-37295 Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37295 Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37294

CVE-2023-37294 affects AMI MegaRAC SPx BMC. The vulnerability is described as a heap memory corruption that can be triggered by an adjacent network, with potential impact to confidentiality, integrity, and availability. The CVE entry cites high-severity scores (CVSS 3.1: AV Adjacent, AC Low/High ...

CVE-2023-37294 Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37293 stack-based buffer overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37293

CVE-2023-37293 affects AMI MegaRAC SPx BMC, with a stack-based buffer overflow exploitable over an adjacent network. The vulnerability impacts confidentiality, integrity, and availability. Affected component: SPx BMC; attacker access required via adjacent network; exploitation details, mitigation...

CVE-2023-34333 Untrusted Pointer Dereference

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-34333

CVE-2023-34333 affects AMI MegaRAC SPx BMC, where an attacker on the local network can cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Connected sources consistently describe the vulnerability in the SPx BMC and its local-network e...

CVE-2023-3043

CVE-2023-3043 affects AMI MegaRAC SPx BMC, where a stack-based buffer overflow can be triggered over an adjacent network. The vulnerability in the SPx firmware could lead to confidentiality, integrity, and availability losses. Reported CVSS vectors indicate high to critical impact (CVSS v3.1: AV:...

CVE-2023-34332

CVE-2023-34332 covers a vulnerability in AMI’s MegaRAC SPx BMC. The issue allows an attacker on the local network to cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Effectively, the BMC firmware component and its handling of pointe...

AMI MegaRAC SPx Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2024-1904)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.392.b08-2.82. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1904 advisory. Vulnerability in Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Jav...

PT-2024-1585 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a heap memory corruption vulnerability in the BMC of AMI MegaRAC SP-X. This vulnerability can be exploited by an attacker via an adjacent network, potential...