Openbmc Security Vulnerabilities and Issues — Openbmc CVE List

Lucene search

Openbmc-projectOpenbmc

3 matches found

CVE•added 2022/10/27 1:15 p.m.•57 views

CVE-2022-2809

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser handles unclosed http headers. If long eno...

8.2CVSS7.5AI score0.00111EPSS

CVE•added 2022/10/27 1:15 p.m.•43 views

CVE-2022-3409

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected pro...

8.2CVSS7.6AI score0.00111EPSS

CVE•added 2020/06/15 6:15 p.m.•35 views

CVE-2020-14156

user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.

8.8CVSS8.7AI score0.00313EPSS