{"id":"UBUNTU-CVE-2024-42934","details":"OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.","modified":"2026-04-22T15:04:43.946876Z","published":"2024-10-09T05:15:00Z","upstream":["CVE-2024-42934"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-42934"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2024-42934"}],"affected":[{"package":{"name":"openipmi","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/openipmi@2.0.18-0ubuntu7.2?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.18-0ubuntu6","2.0.18-0ubuntu7","2.0.18-0ubuntu7.1","2.0.18-0ubuntu7.2"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenipmi0","binary_version":"2.0.18-0ubuntu7.2"},{"binary_name":"openipmi","binary_version":"2.0.18-0ubuntu7.2"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}},{"package":{"name":"openipmi","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/openipmi@2.0.18-0ubuntu11.2?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.18-0ubuntu8","2.0.18-0ubuntu9","2.0.18-0ubuntu10","2.0.18-0ubuntu11","2.0.18-0ubuntu11.1","2.0.18-0ubuntu11.2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.0.18-0ubuntu11.2","binary_name":"libopenipmi0"},{"binary_name":"openipmi","binary_version":"2.0.18-0ubuntu11.2"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}},{"package":{"name":"openipmi","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/openipmi@2.0.22-1.1ubuntu2.1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.22-1.1ubuntu1","2.0.22-1.1ubuntu2","2.0.22-1.1ubuntu2.1"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenipmi0","binary_version":"2.0.22-1.1ubuntu2.1"},{"binary_version":"2.0.22-1.1ubuntu2.1","binary_name":"openipmi"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}},{"package":{"name":"openipmi","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/openipmi@2.0.27-0ubuntu2?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.25-2.1ubuntu1","2.0.27-0ubuntu1","2.0.27-0ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenipmi0","binary_version":"2.0.27-0ubuntu2"},{"binary_name":"openipmi","binary_version":"2.0.27-0ubuntu2"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}},{"package":{"name":"openipmi","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/openipmi@2.0.29-0.1ubuntu6?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.29-0.1ubuntu4","2.0.29-0.1ubuntu5","2.0.29-0.1ubuntu6"],"ecosystem_specific":{"binaries":[{"binary_version":"2.0.29-0.1ubuntu6","binary_name":"libopenipmi0"},{"binary_name":"openipmi","binary_version":"2.0.29-0.1ubuntu6"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}},{"package":{"name":"openipmi","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/openipmi@2.0.33-1.1build3?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.33-1","2.0.33-1.1build2","2.0.33-1.1build3"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenipmi0t64","binary_version":"2.0.33-1.1build3"},{"binary_name":"openipmi","binary_version":"2.0.33-1.1build3"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}},{"package":{"name":"openipmi","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/openipmi@2.0.37-1?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.33-2","2.0.37-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenipmi0t64","binary_version":"2.0.37-1"},{"binary_name":"openipmi","binary_version":"2.0.37-1"}],"priority_reason":"Only affects IPMI simulator"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-42934.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"type":"Ubuntu","score":"low"}]}