Dell iDRAC Service Module (out-of-bounds write): Out-of-bounds write allowing a privileged local attacker to execute

CVE-2024-38490Firmware, BMC & network fabriccurated

Impact

Out-of-bounds write allowing a privileged local attacker to execute code, typically ending in denial of service of the host.

Who can reach it

Privileged local user with interaction on the host.

What to do

Upgrade iSM past 5.3.0.0. Package update only.

References

https://www.dell.com/support/kbdoc/en-us/000227444/dsa-2024-086-security-update-for-dell-idrac-service-module-for-memory-corruption-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.