CVE-2021-39295

Description

References

• google/security-research security advisory · Exploit
• openbmc/docs · Release Notes
• openbmc/openbmc · Product
• openbmc/openbmc · Not Applicable
• openbmc.org · Product
• intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html · Third Party Advisory

Autres vulnérabilités de openbmc

• CVE-2022-35729ÉLEVÉE 7.5Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enab…
• CVE-2022-3409ÉLEVÉE 7.5A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for…
• CVE-2022-2809ÉLEVÉE 7.5A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with…
• CVE-2021-39296CRITIQUE 10.0In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
• CVE-2020-14156ÉLEVÉE 8.8user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions…