11
29
Fork
You've already forked ipmitool
33

Eliminate possible ipmievd command line overrun #26

Closed
opened 2024年02月12日 19:51:16 +01:00 by Howitzer105mm · 1 comment
Contributor
Copy link

Describe the bug
The ipmievd command line parsing has some problems.
One is a possible buffer overrun caused by using an unbounded strlen call on an input argument.
Allowing an unbounded string read has the possibility of enabling a buffer overrun attack.

IPMITOOL Version

Make sure you're reporting a bug in the latest code taken from master branch here, NOT a bug
that you've found in some version that you've got from your OS vendor or any source other than this repository.

ipmitool version 1.8.19.16.g81b8242

To Reproduce
No reproduction steps.

Expected behavior
The number of characters read for the pidfile argument will never exceed 63 characters

Additional context
Add any other context about the problem here.

**Describe the bug** The ipmievd command line parsing has some problems. One is a possible buffer overrun caused by using an unbounded strlen call on an input argument. Allowing an unbounded string read has the possibility of enabling a buffer overrun attack. **IPMITOOL Version** Make sure you're reporting a bug in the latest code taken from `master` branch here, NOT a bug that you've found in some version that you've got from your OS vendor or any source other than this repository. ```ipmitool version 1.8.19.16.g81b8242``` **To Reproduce** No reproduction steps. **Expected behavior** The number of characters read for the pidfile argument will never exceed 63 characters **Additional context** Add any other context about the problem here.
Author
Contributor
Copy link

Resolved with:
9564746d3f ipmievd: Eliminate a possible command line overrun (#27)

Resolved with: 9564746d3f37930383472214055692ec4c1ba3d4 ipmievd: Eliminate a possible command line overrun (#27)
Sign in to join this conversation.
No Branch/Tag specified
master
bugfix/43-Fix-timezone-and-DST-in-SEL
pages
bugfix/fix-ci-builds
feature/refactor-sdr-name-handling
cleanup/nm
feature/add-support-for-boot-mailbox
codefactor
bugfix/26
IPMITOOL_1_8_19
IPMITOOL_1_8_18
IPMITOOL_1_8_17
IPMITOOL_1_8_16
IPMITOOL_1_8_15
IPMITOOL_1_8_15RC1
IPMITOOL_1_8_14
IPMITOOL_1_8_14RC2
IPMITOOL_1_8_14RC1
ipmitool
IPMITOOL_1_8_13
IPMITOOL_1_8_13RC1
IPMITOOL_1_8_12
IPMITOOL_1_8_9
IPMITOOL_1_8_8
IPMITOOL_1_8_7
IPMITOOL_1_8_6
IPMITOOL_1_8_5
IPMITOOL_1_8_0
IPMITOOL_S10_U1
IPMITOOL_1_6_1
IPMITOOL_1_6_0
IPMITOOL_1_5_9
IPMITOOL_1_5_8
IPMITOOL_1_5_7
IPMITOOL_1_5_6
IPMITOOL_1_5_4
IPMITOOL_1_4_1_1
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
IPMITool/ipmitool#26
Reference in a new issue
IPMITool/ipmitool
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?