CVE-2022-35729

Published: Feb 16, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.

Affected (1)

Products: Openbmc Project: Openbmc

Openbmc Project

1 product

Openbmc

Configuration A

1 vulnerable · 57 platform

Vulnerable Software	Affected Versions
Openbmc Project Openbmc	Before 0.72

Running on/with	Platform Versions
Intel C621a	All versions
Intel C624a	All versions
Intel C627a	All versions
Intel C629a	All versions
Intel Xeon Gold 5315y	All versions
Intel Xeon Gold 5317	All versions
Intel Xeon Gold 5318h	All versions
Intel Xeon Gold 5318n	All versions
Intel Xeon Gold 5318s	All versions
Intel Xeon Gold 5318y	All versions
Intel Xeon Gold 5320	All versions
Intel Xeon Gold 5320h	All versions
Intel Xeon Gold 5320t	All versions
Intel Xeon Gold 6312u	All versions
Intel Xeon Gold 6314u	All versions
Intel Xeon Gold 6326	All versions
Intel Xeon Gold 6328h	All versions
Intel Xeon Gold 6328hl	All versions
Intel Xeon Gold 6330	All versions
Intel Xeon Gold 6330h	All versions
Intel Xeon Gold 6330n	All versions
Intel Xeon Gold 6334	All versions
Intel Xeon Gold 6336y	All versions
Intel Xeon Gold 6338	All versions
Intel Xeon Gold 6338n	All versions
Intel Xeon Gold 6338t	All versions
Intel Xeon Gold 6342	All versions
Intel Xeon Gold 6346	All versions
Intel Xeon Gold 6348	All versions
Intel Xeon Gold 6348h	All versions
Intel Xeon Gold 6354	All versions
Intel Xeon Platinum 8351n	All versions
Intel Xeon Platinum 8352m	All versions
Intel Xeon Platinum 8352s	All versions
Intel Xeon Platinum 8352v	All versions
Intel Xeon Platinum 8352y	All versions
Intel Xeon Platinum 8353h	All versions
Intel Xeon Platinum 8354h	All versions
Intel Xeon Platinum 8356h	All versions
Intel Xeon Platinum 8358	All versions
Intel Xeon Platinum 8358p	All versions
Intel Xeon Platinum 8360h	All versions
Intel Xeon Platinum 8360hl	All versions
Intel Xeon Platinum 8360y	All versions
Intel Xeon Platinum 8362	All versions
Intel Xeon Platinum 8368	All versions
Intel Xeon Platinum 8368q	All versions
Intel Xeon Platinum 8376h	All versions
Intel Xeon Platinum 8376hl	All versions
Intel Xeon Platinum 8380	All versions
Intel Xeon Platinum 8380h	All versions
Intel Xeon Platinum 8380hl	All versions
Intel Xeon Silver 4309y	All versions
Intel Xeon Silver 4310	All versions
Intel Xeon Silver 4310t	All versions
Intel Xeon Silver 4314	All versions
Intel Xeon Silver 4316	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html

Source: secure@intel.com

Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.