OESA-2024-2283 OpenIPMI security update

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU Field Replaceable Unit information, and...

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator resulting in denial of service or (with very low probability) authentication bypass or code execution.

...

AZL-50319 CVE-2024-42934 affecting package OpenIPMI for versions less than 2.0.36-1

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...