CVE-2020-14156

Description

References

• openbmc/openbmc · Third Party Advisory
• openbmc/phosphor-host-ipmid commit b265455 · Patch
• lists.ozlabs.org/pipermail/openbmc/2020-June/022020.html · Mailing List

openbmc의 다른 취약점

• CVE-2021-39295높음 7.5In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.
• CVE-2022-35729높음 7.5Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enab…
• CVE-2022-3409높음 7.5A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for…
• CVE-2022-2809높음 7.5A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with…
• CVE-2021-39296심각 10.0In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.