AMI BMC contains a vulnerability in the IPMI handler,... · CVE-2023-34335 · GitHub Advisory Database · GitHub

AMI BMC contains a vulnerability in the IPMI handler,...

Critical severity Unreviewed Published Jul 6, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

AMI BMC contains a vulnerability in the IPMI handler, where an
unauthenticated host is allowed to write to a host SPI flash, bypassing secure
boot protections. An exploitation of this vulnerability may lead to a loss of
integrity or denial of service.

References

Published by the National Vulnerability Database

Jun 12, 2023

Published to the GitHub Advisory Database Jul 6, 2023

Last updated Apr 4, 2024