CVE-2022-3409: Unauthenticated out of bounds stack write in bmcweb
First published: Thu Oct 27 2022(Updated: )
A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser handles unclosed http headers. If long enough http header is passed in the multipart form without colon there is one byte overwrite on heap. It can be conducted multiple times in a loop to cause DoS.
Credit: openbmc-security@lists.ozlabs.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openbmc-project Openbmc | >=2.10.0<=2.13.0 |
Remedy
https://gerrit.openbmc.org/c/openbmc/bmcweb/+/56868
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-3409.
What is the title of this vulnerability?
The title of this vulnerability is 'A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service'.
What is the severity level of CVE-2022-3409?
The severity level of CVE-2022-3409 is high, with a severity value of 7.5.
Which software is affected by CVE-2022-3409?
The OpenBMC Project's bmcweb software is affected by CVE-2022-3409.
How can CVE-2022-3409 be mitigated?
Mitigation for CVE-2022-3409 can be achieved by updating the OpenBMC Project's bmcweb software to a version above 2.13.0.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/openbmc-project
- canonical/openbmc-project openbmc
- version/openbmc-project openbmc/2.10.0
- version/openbmc-project openbmc/2.13.0