💣Exploit CVE-2024-41660 - OpenBMC slpd-lite UDP Buffer Overflow Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2024-41660
Published : July 31, 2024, 8:15 p.m. | 1 hour, 17 minutes ago
Description : slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon on the BMC. Patches will be available in the latest openbmc/slpd-lite repository.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.