Design/Logic Flaw

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

CVE-2021-39295

CVE-2021-39295 affects OpenBMC 2.9. An attacker can craft IPMI messages over the netipmid (IPMI lan+) interface to cause a denial of service on the BMC. Connected sources confirm this is a netipmid-triggered DoS issue; no public exploit details are provided in the documents. Intel/INTEL-SA-00737 ...

CVE-2021-39295

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface...

PT-2023-12349 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC version 2.9 Description: The issue allows an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface by sending crafted IPMI messages. Recommendations: For OpenBMC version 2.9, consider restricting access...

Security Bulletin: This Power System update is being released to address CVE-2022-3435

Summary POWER10: In response to a security issue with ipv4 network connections, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2022-3435. Vulnerability Details CVEID:CVE-2022-3435 DESCRIPTION: Linux Kernel could allow a remote...

The vulnerability of the netipmid (IPMI LAN+) interface in the embedded operating system OpenBMC, related to errors during authentication procedures, allows a intruder to bypass the authentication process and gain full control over the system.

The vulnerability of the netipmid IPMI LAN+ interface in the embedded operating system OpenBMC is related to errors during the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain full control over the system...

CVE-2022-35729

Out of bounds read in firmware for OpenBMC in some IntelR platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access...

CVE-2022-35729

Out of bounds read in firmware for OpenBMC in some IntelR platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access...

CVE-2022-29494

Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2022-29494

Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...

Authorization

Out of bounds read in firmware for OpenBMC in some IntelR platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access...

Input validation

Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2022-29494

Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2022-35729

Out of bounds read in firmware for OpenBMC in some IntelR platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access...

CVE-2022-35729

Out of bounds read in firmware for OpenBMC in some IntelR platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access...

CVE-2022-35729

CVE-2022-35729 affects OpenBMC firmware on some Intel platforms. The issue is an out-of-bounds read in the firmware that, on affected OpenBMC/OpenBMC implementations prior to version 0.72, could allow an unauthenticated attacker to cause a denial of service over the network. The vulnerability is ...

CVE-2022-29494

CVE-2022-29494 affects OpenBMC firmware on some Intel platforms. The issue is an improper input validation in the firmware before versions egs-0.91-179 and bhs-04-45, which may allow an authenticated user to cause a denial of service over the network. Affected products include OpenBMC on Intel pl...

CVE-2022-29494

Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...

PT-2023-13447 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC versions prior to 0.72 Description: The issue is an out of bounds read in the firmware for OpenBMC in some Intel platforms, which may allow an unauthenticated user to potentially enable denial of service via network access...