Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3604-1

Опубликовано: 11 окт. 2024
Источник: suse-cvrf

Описание

Security update for OpenIPMI

This update for OpenIPMI fixes the following issues:

  • CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator (bsc#1229910)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP5
OpenIPMI-2.0.31-150400.3.5.1
OpenIPMI-devel-2.0.31-150400.3.5.1
libOpenIPMI0-2.0.31-150400.3.5.1
openSUSE Leap 15.5
OpenIPMI-2.0.31-150400.3.5.1
OpenIPMI-devel-2.0.31-150400.3.5.1
OpenIPMI-python3-2.0.31-150400.3.5.1
libOpenIPMI0-2.0.31-150400.3.5.1

Ссылки

Описание

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP5:OpenIPMI-2.0.31-150400.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:OpenIPMI-devel-2.0.31-150400.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:libOpenIPMI0-2.0.31-150400.3.5.1
openSUSE Leap 15.5:OpenIPMI-2.0.31-150400.3.5.1
Ссылки