1363 matches found
openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator
A flaw was found in the IPMI simulator ipmisim component of OpenIPMI. Due to a missing check in the authorization type on incoming LAN messages, an attacker may be able to trigger a denial of service...
Moderate: Red Hat Security Advisory: OpenIPMI security update
An update for OpenIPMI is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
RHEL 9 : OpenIPMI (RHSA-2024:8037)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8037 advisory. The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface IPMI...
RHEL 9 : OpenIPMI (RHSA-2024:8081)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8081 advisory. The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface IPMI...
Moderate: OpenIPMI security update
The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface IPMI. System administrators can use OpenIPMI to manage systems and to perform system health monitoring. Security Fixes: openipmi: missing check on the...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : OpenIPMI (SUSE-SU-2024:3604-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3604-1 advisory. - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulato...
Security update for OpenIPMI
This update for OpenIPMI fixes the following issues: CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
ROS-20241011-01
A vulnerability in the NFSD component of the Linux operating system kernel is related to a READDIR buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the dbgfs component of the Linux operating system kernel is related to...
AZL-50319 CVE-2024-42934 affecting package OpenIPMI for versions less than 2.0.36-1
OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...
UBUNTU-CVE-2024-42934
OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...
CVE-2024-42934
OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...
CVE-2024-42934
OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or with very low probability authentication bypass or code execution...
SUSE-SU-2024:3505-1 Security update for OpenIPMI
This update for OpenIPMI fixes the following issues: - CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check. bsc1229910...
PT-2025-9932
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified. The issue is related to the ipmi ipmb module, where the function devm kasprintf can return a NULL pointer on failure, but this...
CVE-2024-8278
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands...
CVE-2024-8059
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters...
CVE-2024-8278
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands...
CVE-2024-8278
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands...
CVE-2024-8278
CVE-2024-8278 (XCC) affects Lenovo XClarity Controller (XCC) embedded in IBM Cloud Pak System SR630 OEMSR630. A remote, authenticated attacker with elevated privileges can perform command injection via specially crafted IPMI commands due to an input-validation weakness. Base CVSS v3.1: 7.2 (HIGH)...