CVE-2022-3409

Name of the Vulnerable Software and Affected Versions OpenBMC Project (affected versions not specified)

Description A denial of service issue exists due to a problem in the multipart parser code. The issue arises when handling unclosed HTTP headers, specifically if a long enough HTTP header is passed in the multipart form without a colon, resulting in a one-byte overwrite on the heap. This can be repeated in a loop to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.