OpenBMC Security Advisory - CVE-2019-6260

OpenBMC Security Advisory - CVE-2019-6260

[Kun Zhao]

[-- Attachment #1: Type: text/plain, Size: 198 bytes --]

Hi Team,

This link here described the ‘pantsdown’ vulnerability found in OpenBMC,
https://github.com/openbmc/openbmc/issues/3475

So what are the commits for fixing it?


Thanks.

Kun


[-- Attachment #2: Type: text/html, Size: 1897 bytes --]

Re: OpenBMC Security Advisory - CVE-2019-6260

[TOM JOSEPH]

[-- Attachment #1: Type: text/plain, Size: 619 bytes --]

Hello Kun,

The OpenBMC side of the fixes are captured in this link.

https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260-gaining-control-of-bmc-from-the-host-processor/

Regards,
Tom

On 21-09-2020 05:17, Kun Zhao wrote:
> Hi Team, This link here described the ‘pantsdown’ vulnerability found 
> in OpenBMC,...
> This Message Is From an External Sender
> This message came from outside your organization.
>
> Hi Team,
>
> This link here described the ‘pantsdown’ vulnerability found in OpenBMC,
>
> https://github.com/openbmc/openbmc/issues/3475
>
> So what are the commits for fixing it?
>
> Thanks.
>
> Kun
>

[-- Attachment #2: Type: text/html, Size: 7924 bytes --]

RE: OpenBMC Security Advisory - CVE-2019-6260

[Kun Zhao]

[-- Attachment #1: Type: text/plain, Size: 917 bytes --]

Thank you so much, Tom.



Thanks.

Kun

From: TOM JOSEPH<mailto:tomjose@linux.vnet.ibm.com>
Sent: Sunday, September 20, 2020 6:02 PM
To: Kun Zhao<mailto:zkxz@hotmail.com>; openbmc@lists.ozlabs.org<mailto:openbmc@lists.ozlabs.org>
Subject: Re: OpenBMC Security Advisory - CVE-2019-6260


Hello Kun,

The OpenBMC side of the fixes are captured in this link.

https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260-gaining-control-of-bmc-from-the-host-processor/

Regards,
Tom
On 21-09-2020 05:17, Kun Zhao wrote:
Hi Team, This link here described the ‘pantsdown’ vulnerability found in OpenBMC,...
This Message Is From an External Sender
This message came from outside your organization.
Hi Team,

This link here described the ‘pantsdown’ vulnerability found in OpenBMC,
https://github.com/openbmc/openbmc/issues/3475

So what are the commits for fixing it?


Thanks.

Kun



[-- Attachment #2: Type: text/html, Size: 6306 bytes --]

RE: OpenBMC Security Advisory - CVE-2019-6260

[Kun Zhao]

[-- Attachment #1: Type: text/plain, Size: 917 bytes --]

Thank you so much, Tom.



Thanks.

Kun

From: TOM JOSEPH<mailto:tomjose@linux.vnet.ibm.com>
Sent: Sunday, September 20, 2020 6:02 PM
To: Kun Zhao<mailto:zkxz@hotmail.com>; openbmc@lists.ozlabs.org<mailto:openbmc@lists.ozlabs.org>
Subject: Re: OpenBMC Security Advisory - CVE-2019-6260


Hello Kun,

The OpenBMC side of the fixes are captured in this link.

https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260-gaining-control-of-bmc-from-the-host-processor/

Regards,
Tom
On 21-09-2020 05:17, Kun Zhao wrote:
Hi Team, This link here described the ‘pantsdown’ vulnerability found in OpenBMC,...
This Message Is From an External Sender
This message came from outside your organization.
Hi Team,

This link here described the ‘pantsdown’ vulnerability found in OpenBMC,
https://github.com/openbmc/openbmc/issues/3475

So what are the commits for fixing it?


Thanks.

Kun



[-- Attachment #2: Type: text/html, Size: 6306 bytes --]

Re: OpenBMC Security Advisory - CVE-2019-6260

[Andrew Jeffery]

On Tue, 22 Sep 2020, at 01:39, Kun Zhao wrote:
>  
> Thank you so much, Tom.

FWIW I've pushed a little utility for people to test their systems for
CVE-2019-6260:

https://github.com/amboar/cve-2019-6260/

Andrew