CVE-2024-42934
Publication date 9 October 2024
Last updated 16 October 2024
Ubuntu priority
OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.
Read the notes from the security team
Why is this CVE low priority?
Only affects IPMI simulator
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| openipmi | 24.10 oracular |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| 14.04 LTS trusty |
Needs evaluation
|
Notes
Patch details
| Package | Patch details |
|---|---|
| openipmi |