Jynik

**Name of the Vulnerable Software and Affected Versions** OpenBMC versions (affected versions not specified) **Description** The issue is related to a memory overflow problem in the slpd-lite daemon, which is a unicast SLP UDP server. This can be exploited by sending specially crafted SLP packets to the BMC using UDP port 427, potentially allowing remote attackers to compromise the confidentiality, integrity, and availability of the system. The vulnerability is due to a buffer copy without checking the size of the input data. **Recommendations** To resolve the issue, consider the following: - Block UDP port 427 in the network to limit access to the BMC. - If SSH access to the BMC is available, disable the slpd-lite.service through systemctl. At the moment, there is no information about a newer version that contains a fix for this vulnerability.