Summary
The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.
Security Fix(es):
* openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | OpenIPMI | 0:2.0.32-5.el9_4 |
Vulnerabilities 1
-
Medium 5.0
OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2308375