Affected: AlmaLinux:9: OpenIPMI, AlmaLinux:9: OpenIPMI-devel, AlmaLinux:9: OpenIPMI-lanserv, AlmaLinux:9: OpenIPMI-libs

The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.

Security Fix(es):

* openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected: Alpaquita:23: openipmi, Alpaquita:stream: openipmi

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

Affected: openEuler:20.03-LTS-SP4: OpenIPMI

This is the OpenIPMI library, a library that makes simplifies building complex IPMI management software.IPMI is a specification detailing how to detect and manage sensors in a system. It also specifies some chassis-level thing like power control,reset, FRU (Field Replaceable Unit) information, and watchdogs. Security Fix(es): OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.(CVE-2024-42934)

OpenIPMI-2.0.36.4+git.c114912-1.1 on GA media

openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator

Security update for OpenIPMI

Affected: Ubuntu:14.04:LTS: openipmi, Ubuntu:16.04:LTS: openipmi, Ubuntu:18.04:LTS: openipmi, Ubuntu:20.04:LTS: openipmi, Ubuntu:22.04:LTS: openipmi, Ubuntu:24.04:LTS: openipmi, Ubuntu:25.10: openipmi

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, die Authentifizierung zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.