2024-10-09 06:03:17 +00:00
{
"id" : "CVE-2024-42934" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-10-09T05:15:13.270" ,
2024-10-31 21:03:20 +00:00
"lastModified" : "2024-10-31T20:35:05.250" ,
2024-10-10 14:03:23 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-10-09 06:03:17 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution."
2024-10-10 14:03:23 +00:00
} ,
{
"lang" : "es" ,
"value" : "OpenIPMI anterior a 2.0.36 tiene un acceso a una matriz fuera de los l\u00edmites (para el tipo de autenticaci\u00f3n) en el simulador ipmi_sim, lo que resulta en una denegaci\u00f3n de servicio o (con muy baja probabilidad) en la omisi\u00f3n de la autenticaci\u00f3n o la ejecuci\u00f3n del c\u00f3digo."
2024-10-09 06:03:17 +00:00
}
] ,
2024-10-31 21:03:20 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 5.0 ,
"baseSeverity" : "MEDIUM" ,
2024-10-31 21:03:20 +00:00
"attackVector" : "ADJACENT_NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "LOW"
2024-10-31 21:03:20 +00:00
} ,
"exploitabilityScore" : 1.6 ,
"impactScore" : 3.4
}
]
} ,
"weaknesses" : [
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-862"
}
]
}
] ,
2024-10-09 06:03:17 +00:00
"references" : [
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2308375" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://sourceforge.net/p/openipmi/code/ci/4c129d0540f3578ecc078d8612bbf84b6cd24c87" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://sourceforge.net/p/openipmi/code/ci/b52e8e2538b2b48ef6b63bff12b5cc9e2d52eff1/" ,
"source" : "cve@mitre.org"
}
]
}