Skip to content
OpenAdvisories

Product · Huawei

openBMC

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.5

    Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses

    The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length w…