Astra Linux – Vulnerability in openipmi

OpenIPMI before version 2.0.36 has a buffer overflow vulnerability related to the authentication type in the ipmisim simulator. This vulnerability can lead to denial of service, or with a very low probability authentication bypass or code execution...

Rocky Linux 9 [CIQ] Security Update: OpenIPMI / OpenIPMI-debuginfo / OpenIPMI-debugsource / etc (crlsa-2024_8037)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248037 advisory. openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator CVE-2024-42934 Tenable has extracted the preceding description block...

MiracleLinux 9 : OpenIPMI-2.0.32-5.el9_4 (AXSA:2024-8899:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8899:01 advisory. openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator CVE-2024-42934 Tenable has extracted the preceding description...

EulerOS 2.0 SP10 : OpenIPMI (EulerOS-SA-2024-2890)

According to the versions of the OpenIPMI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the IPMI simulator ipmisim component of OpenIPMI.Due to a missing check in the authorization type on incoming LAN messages, ...

OpenIPMI security update

An update is available for OpenIPMI. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenIPMI packages provide command-line tools and utilities to access...

OESA-2024-2290 OpenIPMI security update

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU Field Replaceable Unit information, and...

OESA-2024-2289 OpenIPMI security update

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU Field Replaceable Unit information, and...

SUSE SLES12 Security Update : OpenIPMI (SUSE-SU-2024:3717-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3717-1 advisory. - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910 Tenable has extracted...

OESA-2024-2284 OpenIPMI security update

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU Field Replaceable Unit information, and...

OESA-2024-2285 OpenIPMI security update

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU Field Replaceable Unit information, and...

SUSE-SU-2024:3717-1 Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910...

Medium: OpenIPMI

Issue Overview: openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator CVE-2024-42934 Affected Packages: OpenIPMI Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extra...

Medium: OpenIPMI

Issue Overview: openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator CVE-2024-42934 Affected Packages: OpenIPMI Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extra...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : OpenIPMI (SUSE-SU-2024:3604-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3604-1 advisory. - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulato...

Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

UBUNTU-CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...

SUSE-SU-2024:3505-1 Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: - CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check. bsc1229910...

SUSE CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...