CVE-2021-36357

An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...

OpenPOWER 安全漏洞

OpenPOWER is the firmware for the OpenPower system. A security vulnerability exists in OpenPOWER that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...