CVE-2024-42934

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU (Field Replaceable Unit) information, and watchdogs.

Security Fix(es):

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.(CVE-2024-42934)

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU (Field Replaceable Unit) information, and watchdogs.

Security Fix(es):

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.(CVE-2024-42934)

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU (Field Replaceable Unit) information, and watchdogs.

Security Fix(es):

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.(CVE-2024-42934)

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU (Field Replaceable Unit) information, and watchdogs.

Security Fix(es):

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.(CVE-2024-42934)

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU (Field Replaceable Unit) information, and watchdogs.

Security Fix(es):

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.(CVE-2024-42934)

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.

Security Fix(es):

• openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

• CVE-2024-42934: fix out-of-bounds array access on auth byte in lanserv_ipmi.c (handle_temp_session, ipmi_handle_lan_msg)

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

These are all security issues fixed in the OpenIPMI-2.0.36.4+git.c114912-1.1 package on the GA media of openSUSE Tumbleweed.

The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.

Security Fix(es):

• openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for OpenIPMI fixes the following issues:

• CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check. (bsc#1229910)

This update for OpenIPMI fixes the following issues:

• CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator (bsc#1229910)

This update for OpenIPMI fixes the following issues:

• CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator (bsc#1229910)