PT-2024-5773 · Openbmc · Openbmc

Jynik

·

Published

2024-07-31

·

Updated

2024-08-24

·

CVE-2024-41660

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenBMC versions (affected versions not specified)
Description The issue is related to a memory overflow problem in the slpd-lite daemon, which is a unicast SLP UDP server. This can be exploited by sending specially crafted SLP packets to the BMC using UDP port 427, potentially allowing remote attackers to compromise the confidentiality, integrity, and availability of the system. The vulnerability is due to a buffer copy without checking the size of the input data.
Recommendations To resolve the issue, consider the following:
  • Block UDP port 427 in the network to limit access to the BMC.
  • If SSH access to the BMC is available, disable the slpd-lite.service through systemctl. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-06486
CVE-2024-41660
GHSA-WMGV-JFFG-V3XR

Affected Products

Openbmc