VulnerabilityDeferred

CVE-2024-41660

Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon on the BMC.

CRITICAL 9.8EPSS 0.86%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.86%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon on the BMC. Patches will be available in the latest openbmc/slpd-lite repository.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.86% probability · 56th percentile
CISA KEV: Not listed
Weakness: CWE-120
Source: security-advisories@github.com

References

https://github.com/openbmc/slpd-lite/security/advisories/GHSA-wmgv-jffg-v3xr

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.