Back to Database
Status published
Unknown
CVE-2021-39295
In OpenBMC 2.9, crafted IPMI messages allow an attacker to...
Vulnerability Description
In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-39295
Credits & Attribution
No credits recorded in the NVD database.
References
- https://openbmc.org
- https://github.com/openbmc/openbmc
- https://github.com/openbmc/docs/blob/master/release/release-notes.md
- https://github.com/openbmc/openbmc/issues/3811
- https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
Affected Vendor
openbmc-project
View all reports →Affected Software
openbmc
Vulnerable Versions:
2.9.0
Timeline
Official Publish:
April 15th, 2023
Last Modified:
February 6th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.