Skip to content
OpenAdvisories

Vendor

OpenBMC

5 known vulnerabilities.

Products

OpenBMC 2 phosphor-net-ipmid 2 slpd-lite 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-41660

    slpd-lite unauthenticated memory corruption

    slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflo…

    OpenBMC slpd-lite