OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-openipmialma-upgrade-openipmi-develalma-upgrade-openipmi-lanservalma-upgrade-openipmi-libs | Oct 16, 2024 | Oct 9, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openipmiamazon-linux-ami-2-upgrade-openipmi-debuginfoamazon-linux-ami-2-upgrade-openipmi-develamazon-linux-ami-2-upgrade-openipmi-libsamazon-linux-ami-2-upgrade-openipmi-modaliasamazon-linux-ami-2-upgrade-openipmi-perlamazon-linux-ami-2-upgrade-openipmi-python | Oct 17, 2024 | Oct 9, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Oct 9, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-openipmihuawei-euleros-2_0_sp10-upgrade-openipmi-perlhuawei-euleros-2_0_sp10-upgrade-python3-openipmi | Nov 11, 2024 | Oct 9, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-openipmihuawei-euleros-2_0_sp12-upgrade-openipmi-perlhuawei-euleros-2_0_sp12-upgrade-python3-openipmi | Dec 12, 2024 | Oct 9, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-openipmihuawei-euleros-2_0_sp9-upgrade-openipmi-perlhuawei-euleros-2_0_sp9-upgrade-python3-openipmi | Nov 11, 2024 | Oct 9, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-openipmioracle-linux-upgrade-openipmi-develoracle-linux-upgrade-openipmi-lanservoracle-linux-upgrade-openipmi-libs | Oct 16, 2024 | Aug 22, 2024 |
| Redhat_linux | redhat-upgrade-openipmiredhat-upgrade-openipmi-debuginforedhat-upgrade-openipmi-debugsourceredhat-upgrade-openipmi-develredhat-upgrade-openipmi-lanservredhat-upgrade-openipmi-lanserv-debuginforedhat-upgrade-openipmi-libsredhat-upgrade-openipmi-libs-debuginforedhat-upgrade-openipmi-perl-debuginforedhat-upgrade-python3-openipmi-debuginfo | Oct 16, 2024 | Oct 9, 2024 | |
| Rocky_linux | rocky-upgrade-openipmirocky-upgrade-openipmi-debuginforocky-upgrade-openipmi-debugsourcerocky-upgrade-openipmi-develrocky-upgrade-openipmi-lanservrocky-upgrade-openipmi-lanserv-debuginforocky-upgrade-openipmi-libsrocky-upgrade-openipmi-libs-debuginfo | Nov 4, 2024 | Oct 9, 2024 | |
| Suse | — | suse-upgrade-libopenipmi0suse-upgrade-libopenipmiui1suse-upgrade-openipmisuse-upgrade-openipmi-develsuse-upgrade-openipmi-pythonsuse-upgrade-openipmi-python3 | Dec 5, 2025 | Oct 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub