PT-2021-27272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.89 Description The issue is related to a use-after-free UAF error that occurs when uninstalling the ipmi si and ipmi msghandler modules. The actual impact and attack plausibility have not yet been proven...

PT-2021-27300

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.7 through v5.15.11 Description The issue concerns the initialization of the Intelligent Platform Management Interface IPMI when workqueue allocation fails. The actual impact and attack plausibility have not yet been...

PT-2021-27255

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.223 Description The issue concerns the initialization of the Intelligent Platform Management Interface IPMI when workqueue allocation fails. The actual impact and attack plausibility have not yet been prove...

PT-2021-27293

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.12 Description The issue is related to a use-after-free UAF error that occurs when uninstalling the ipmi si and ipmi msghandler modules. The actual impact and attack plausibility have not yet been proven...

PT-2021-8141

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.18.0.x86 64 46 and 47 Description The vulnerability in the Linux kernel is related to a use-after-free UAF issue when uninstalling the ipmi si and ipmi msghandler modules. This can cause the system to crash. The issue...

PT-2021-8123 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the ipmi: ssif component in the Linux kernel. It causes a kernel crash when an error path is taken during the probe of ssif info-client. The issue arise...

Security Bulletin: This Power System update is being released to address CVE-2019-4169

Summary POWER9: In response to an IPMI implementation error, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2019-4169. Vulnerability Details CVEID: CVE-2019-4169 DESCRIPTION: IBM Open Power Firmware could allow access to BMC v...

Security Bulletin: Incorrect file permissions allows authenticated users to recover IPMI user passwords

Summary A flaw in the file permissions may expose IPMI user passwords. This may lead to privilege escalations. Vulnerability Details CVEID: CVE-2020-14156 DESCRIPTION: OpenBMC phosphor-host-ipmid could allow a remote authenticated attacker to bypass security restrictions, caused by the failure to...

Security Bulletin: This Power System update is being released to address CVE 2021-39296

Summary POWER9: In response to a security issue with BMC's IPMI LAN+ interface, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-39296. Vulnerability Details CVEID: CVE-2021-39296 DESCRIPTION: OpenBMC could allow a remote...

[SECURITY] Fedora 35 Update: watchdog-5.16-2.fc35

The watchdog program can be used as a powerful software watchdog daemon or may be alternately used with a hardware watchdog device such as the IPMI hardware watchdog driver interface to a resident Baseboard Management Controller BMC. watchdog periodically writes to /dev/watchdog; the interval...

[SECURITY] Fedora 34 Update: watchdog-5.16-2.fc34

The watchdog program can be used as a powerful software watchdog daemon or may be alternately used with a hardware watchdog device such as the IPMI hardware watchdog driver interface to a resident Baseboard Management Controller BMC. watchdog periodically writes to /dev/watchdog; the interval...

CVE-2021-39296

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system...

CVE-2021-39296

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system...

Authentication flaw

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system...

CVE-2021-39296: Improper Authentication

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system...

CVE-2021-39296

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system...

CVE-2021-39296

CVE-2021-39296: In OpenBMC 2.9, crafted IPMI messages on the netipmid (IPMI LAN+) interface can bypass authentication and grant an attacker full control of the BMC. Intel’s advisory (INTEL-SA-00737) and related vendor bulletins confirm this issue affecting OpenBMC firmware on some Intel platforms...

CVE-2021-39296

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system...

Dell OpenManage Enterprise Operating System Command Injection Vulnerability (CNVD-2021-92459)

Dell OpenManage Enterprise is an easy-to-use, one-to-many systems management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An operating system command injection...

CVE-2021-21585

Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially exploit this vulnerability to execute arbitrary OS commands...