Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3505-1

Опубликовано: 01 окт. 2024
Источник: suse-cvrf

Описание

Security update for OpenIPMI

This update for OpenIPMI fixes the following issues:

  • CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check. (bsc#1229910)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP6
OpenIPMI-2.0.31-150600.10.3.1
OpenIPMI-devel-2.0.31-150600.10.3.1
libOpenIPMI0-2.0.31-150600.10.3.1
openSUSE Leap 15.6
OpenIPMI-2.0.31-150600.10.3.1
OpenIPMI-devel-2.0.31-150600.10.3.1
OpenIPMI-python3-2.0.31-150600.10.3.1
libOpenIPMI0-2.0.31-150600.10.3.1

Ссылки

Описание

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:OpenIPMI-2.0.31-150600.10.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:OpenIPMI-devel-2.0.31-150600.10.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libOpenIPMI0-2.0.31-150600.10.3.1
openSUSE Leap 15.6:OpenIPMI-2.0.31-150600.10.3.1
Ссылки