In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty message instead of an error when fetching events. There are apparently some new BMCs that make this error, so we need to compensate.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b1546c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd31b236e80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36865c680> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3845ff740> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b157840> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b155200> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd341256040> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd341254980> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd384aa00c0> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd36b156600> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd340a13880> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd36865c100> | Operating System |
| linux | linux_kernel | 7.1 | <built-in method update of dict object at 0x7fd31b234ec0> | Operating System |
| linux | linux_kernel | 7.1 | <built-in method update of dict object at 0x7fd2d39fdb80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* |