CVE-2022-2809

Name of the Vulnerable Software and Affected Versions OpenBMC Project (affected versions not specified)

Description A vulnerability in the OpenBMC Project allows a user to cause a denial of service. The issue is related to how the multipart parser code handles unclosed HTTP headers. If a long enough HTTP header is passed in the multipart form without a colon, it can cause a one-byte overwrite on the heap. This can be conducted multiple times in a loop to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.