DeutschShown in its original language — a full translation is planned for a future version.
IBM Power Hardware Management Console: Mehrere Schwachstellen
view advisory published 2024-09-10
Ein Angreifer kann mehrere Schwachstellen in IBM Power Hardware Management Console ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen preiszugeben.
01
describes (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34750US | — | — | ||
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of… | ||||
| CVE-2023-5388US | — | — | ||
NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability… | ||||
| CVE-2023-52425US | high7.5 | — | ||
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are… | ||||
| CVE-2023-40551US | medium5.1 | — | ||
A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase. | ||||
| CVE-2023-40550US | medium5.5 | — | ||
An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase. | ||||
| CVE-2023-40549US | medium5.5 | — | ||
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binar… | ||||
| CVE-2023-40546US | medium5.5 | — | ||
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however… | ||||
| CVE-2023-40548US | — | — | ||
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used b… | ||||
| CVE-2023-40547US | high8.3 | — | ||
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craf… | ||||
| CVE-2023-4641US | medium5.5 | — | ||
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning… | ||||
| CVE-2023-6135US | medium4.3 | — | ||
Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerabilit… | ||||
| CVE-2023-5678US | medium5.3 | — | ||
Issue summary: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow.
Impact summary: Applications that use the funct… | ||||
| CVE-2023-39615US | medium6.5 | — | ||
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a De… | ||||
| CVE-2023-3817US | medium5.3 | — | ||
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_ch… | ||||
| CVE-2023-3446US | medium5.3 | — | ||
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_ch… | ||||
| CVE-2022-3094US | high7.5 | — | ||
Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not awar… | ||||
| CVE-2023-22745US | medium6.4 | — | ||
tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2024-2100 - CSAF Versionself
- WID-SEC-2024-2100 - Portal Versionself
- IBM Security Bulletin 7168007 vom 2024-09-10external
- IBM Security Bulletin 7168008 vom 2024-09-10external
- IBM Security Bulletin 7168013 vom 2024-09-10external
- IBM Security Bulletin 7168014 vom 2024-09-10external
- IBM Security Bulletin 7168015 vom 2024-09-10external
- IBM Security Bulletin 7168016 vom 2024-09-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan