Lucene search
+L

270 matches found

OSV
OSV
•added 2020/02/05 2:15 p.m.•9 views

UBUNTU-CVE-2020-5208

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

8.8CVSS8AI score0.0329EPSS
SaveExploits1References5
CVE
CVE
•added 2020/02/05 2:00 p.m.•470 views

CVE-2020-5208

CVE-2020-5208 affects ipmitool before 1.8.19. Multiple functions in ipmitool neglected proper validation of data, which may cause buffer overflows and potentially remote code execution when ipmitool runs with elevated privileges. The issue is documented across multiple advisories and is stated to...

8.8CVSS8AI score0.0329EPSS
SaveExploits1References8Affected Software1
Debian CVE
Debian CVE
•added 2020/02/05 2:00 p.m.•34 views

CVE-2020-5208

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

8.8CVSS8AI score0.0329EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/02/05 2:00 p.m.•51 views

CVE-2020-5208 remote code execution vulnerability in ipmitool

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

7.7CVSS9AI score0.0329EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2020/02/05 2:00 p.m.•66 views

CVE-2020-5208

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

8.8CVSS8AI score0.0329EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/05 12:00 a.m.•1 views

CVE-2020-5208: Buffer Copy without Checking Size of Input

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

8.8CVSS8AI score0.0329EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/02/04 12:00 a.m.•9 views

PT-2020-3610 · Ipmitool +6 · Ipmitool +6

Name of the Vulnerable Software and Affected Versions: ipmitool versions prior to 1.8.19 Description: The issue arises from multiple functions in ipmitool neglecting proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code...

9CVSS8.2AI score0.0329EPSS
SaveExploits1References89
Veracode
Veracode
•added 2019/01/15 8:52 a.m.•40 views

Denial Of Service (DoS)

openipmi is vulnerable to denial of service DoS attacks. The vulnerability exists as ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid...

3.6CVSS5.7AI score0.00425EPSS
SaveExploits0References22Affected Software2
NVD
NVD
•added 2018/07/18 1:29 p.m.•25 views

CVE-2018-2906

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management...

4.3CVSS2.2AI score0.01643EPSS
SaveExploits0References3
Prion
Prion
•added 2018/07/18 1:29 p.m.•23 views

Design/Logic Flaw

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management...

4.3CVSS3.3AI score0.01643EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2018/07/18 1:00 p.m.•44 views

CVE-2018-2906

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management...

4.8AI score0.01643EPSS
SaveExploits0References3
CVE
CVE
•added 2018/07/18 1:00 p.m.•62 views

CVE-2018-2906

The CVE-2018-2906 issue affects Oracle Sun Systems Products Suite Hardware Management Pack (subcomponent Ipmitool), specifically the 11.3 release. The root cause is an access-control flaw that allows an unauthenticated attacker, with network access via IPMI, to read a subset of data from Hardware...

4.3CVSS2.5AI score0.01643EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/07/18 1:00 p.m.•31 views

CVE-2018-2906

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management...

2.6AI score0.01643EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/18 12:00 a.m.•4 views

CVE-2018-2906: Undefined Security Weakness

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise Hardware Management...

4.3CVSS5.4AI score0.01643EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/04/20 12:00 a.m.•63 views

Oracle Solaris Critical Patch Update : apr2018_SRU11_3_30_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NTPD. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker...

7.8CVSS5.6AI score0.03067EPSS
SaveExploits0References7
OSV
OSV
•added 2018/04/19 2:29 a.m.•12 views

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

3.8CVSS7.3AI score0.01127EPSS
SaveExploits0References3
NVD
NVD
•added 2018/04/19 2:29 a.m.•28 views

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

5.5CVSS2.5AI score0.01127EPSS
SaveExploits0References3
CVE
CVE
•added 2018/04/19 2:00 a.m.•53 views

CVE-2018-2792

CVE-2018-2792 affects the Hardware Management Pack component of Oracle Sun Systems Products Suite, specifically the Ipmitool subcomponent. The affected line is versions prior to 2.4.3. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the ...

5.5CVSS3.6AI score0.01127EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/04/19 2:00 a.m.•29 views

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

3.8AI score0.01127EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2018/04/19 2:00 a.m.•30 views

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

5AI score0.01127EPSS
SaveExploits0References3
Rows per page
Query Builder