CVE-2023-37294

CVE-2023-37294 affects AMI MegaRAC SPx BMC. The vulnerability is described as a heap memory corruption that can be triggered by an adjacent network, with potential impact to confidentiality, integrity, and availability. The CVE entry cites high-severity scores (CVSS 3.1: AV Adjacent, AC Low/High ...

CVE-2023-37293 stack-based buffer overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-37293

CVE-2023-37293 affects AMI MegaRAC SPx BMC, with a stack-based buffer overflow exploitable over an adjacent network. The vulnerability impacts confidentiality, integrity, and availability. Affected component: SPx BMC; attacker access required via adjacent network; exploitation details, mitigation...

CVE-2023-34333 Untrusted Pointer Dereference

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-34333

CVE-2023-34333 affects AMI MegaRAC SPx BMC, where an attacker on the local network can cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Connected sources consistently describe the vulnerability in the SPx BMC and its local-network e...

CVE-2023-3043

CVE-2023-3043 affects AMI MegaRAC SPx BMC, where a stack-based buffer overflow can be triggered over an adjacent network. The vulnerability in the SPx firmware could lead to confidentiality, integrity, and availability losses. Reported CVSS vectors indicate high to critical impact (CVSS v3.1: AV:...

CVE-2023-34332

CVE-2023-34332 covers a vulnerability in AMI’s MegaRAC SPx BMC. The issue allows an attacker on the local network to cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Effectively, the BMC firmware component and its handling of pointe...

AMI MegaRAC SPx Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...

PT-2024-1585 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a heap memory corruption vulnerability in the BMC of AMI MegaRAC SP-X. This vulnerability can be exploited by an attacker via an adjacent network, potential...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2024-1904)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.392.b08-2.82. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1904 advisory. Vulnerability in Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Jav...

Amazon Linux AMI : xorg-x11-server (ALAS-2024-1900)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1900 advisory. A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privile...

AMI MegaRAC Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRAC. A...

Amazon Linux AMI : kernel (ALAS-2024-1899)

The version of kernel installed on the remote host is prior to 4.14.334-177.552. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1899 advisory. 2024-07-03: CVE-2023-52813 was added to this advisory. 2024-06-07: CVE-2023-52881 was added to this advisory...

Amazon Linux AMI : golang (ALAS-2024-1903)

The version of golang installed on the remote host is prior to 1.20.12-1.49. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1903 advisory. A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read ma...

Amazon Linux AMI : squid (ALAS-2024-1901)

The version of squid installed on the remote host is prior to 3.5.20-17.53. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1901 advisory. Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a...

AMI MegaRAC SPx Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...

duffystavernami.com Cross Site Scripting vulnerability OBB-3819442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Amazon Linux AMI : openssh (ALAS-2023-1898)

The version of openssh installed on the remote host is prior to 7.4p1-22.81. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1898 advisory. AWS is aware of CVE-2023-48795, also known as Terrapin, which is found in the SSH protocol and affects SSH channel integrity. A...

Asterisk Multiple Vulnerabilities (Dec 2023)

Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...

CVE-2023-39538

CVE-2023-39538 concerns AMI AptioV BIOS where an attacker with local access can trigger an unrestricted upload of a BMP Logo file deemed dangerous, potentially affecting confidentiality, integrity, and availability. The vulnerability stems from BMP logo handling in AMI AptioV BIOS and has been di...