Red Hat Security Advisory

RHSA-2024:8081

OpenIPMI security update

Released 2024-10-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) OpenIPMI-devel-2.0.32-3.el9_2.3
Red Hat Enterprise Linux AppStream EUS (v.9.2) OpenIPMI-2.0.32-3.el9_2.3, OpenIPMI-lanserv-2.0.32-3.el9_2.3, OpenIPMI-libs-2.0.32-3.el9_2.3

Fixes 1 record

TI-2024-28676 CVE-2024-42934 · GHSA-q84v-q853-g3vh

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the…

LOW 23

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

CVSS 3.1MEDIUM 5.0 Adjacent network No auth No interaction EPSS 0.00392 Published 2024-10-09 Partial fix CWE-862