1363 matches found
GSD-2023-1000593 ipmi: fix memleak when unload ipmi driver
ipmi: fix memleak when unload ipmi driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000455 ipmi: fix use after free in _ipmi_destroy_user()
ipmi: fix use after free in ipmidestroyuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
PT-2023-34421
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue was discovered when unloading the IPMI driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2023-34096 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A memory leak issue was discovered when unloading the IPMI driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2023-33990
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A use after free issue was discovered in the ipmi destroy user function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2023-34350
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.5 through 5.10.162 Description A use after free issue was discovered in the ipmi destroy user function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.5...
PT-2023-33532 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a use after free in the ipmi destroy user function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.5 and fixed in...
PT-2023-34640
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A memory leak issue was discovered when unloading the IPMI driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2023-33670
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a memory leak that occurs when unloading the IPMI driver. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...
CVE-2022-42287
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...
CVE-2022-42288
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...
CVE-2022-42287
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...
Design/Logic Flaw
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...
Design/Logic Flaw
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...
CVE-2022-42283
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...
Design/Logic Flaw
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...
Buffer overflow
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...
CVE-2022-42288
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...
CVE-2022-42288
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...
CVE-2022-42288
Summary (concrete details): CVE-2022-42288 affects NVIDIA DGX Station A100 and DGX Station A800 BMCs where the IPMI handler can be probed by an unauthorized attacker to guess a valid BMC username via certain oracles, potentially leading to information disclosure. The issue is documented across NV...