CVE-2020-14156

The CVE-2020-14156 issue affects OpenBMC phosphor-host-ipmid prior to 2020-04-03, where user_channel/passwd_mgr.cpp failed to ensure strong permissions on /etc/ipmi-pass. This allowed an attacker to read credentials and potentially escalate privileges to IPMI users. Reported in multiple sources (...

CVE-2022-35729

CVE-2022-35729 affects OpenBMC firmware on some Intel platforms. The issue is an out-of-bounds read in the firmware that, on affected OpenBMC/OpenBMC implementations prior to version 0.72, could allow an unauthenticated attacker to cause a denial of service over the network. The vulnerability is ...