vulnerability

Oracle Linux: CVE-2024-42934: ELSA-2024-8037: OpenIPMI security update (MODERATE)

Severity
5
CVSS
(AV:A/AC:M/Au:N/C:P/I:P/A:P)
Published
Aug 22, 2024
Added
Oct 16, 2024
Modified
Dec 3, 2025

Description

A flaw was found in the IPMI simulator (ipmi_sim) component of OpenIPMI. Due to a missing check in the authorization type on incoming LAN messages, an attacker may be able to trigger a denial of service.

Solutions

oracle-linux-upgrade-openipmioracle-linux-upgrade-openipmi-develoracle-linux-upgrade-openipmi-lanservoracle-linux-upgrade-openipmi-libs
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.