""ET EXPLOIT OpenBMC slpd-lite Language Tag Length Memory Corruption Attempt (CVE-2024-41660)""

SID: 2055309

Revision: 1

Class Type: attempted-admin

Metadata: affected_product OpenBMC, attack_target Networking_Equipment, tls_state plaintext, created_at 2024_08_16, cve CVE_2024_41660, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Major, updated_at 2024_08_16

Reference:

• cve

• 2024-41660

Protocol: udp

Source Network: any

Source Port: any

Destination Network: $HOME_NET

Destination Port: 427

Flow:

Contents:

• Value: "|02 09 00 00 00 ff 00 00 00 00 00 00 00|" Depth: 13

Within:

PCRE: "/^(\xff\xff|\xfd\xe8)/R"

Special Options:

• fast_pattern

source