Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security vulnerability (CVE-2024-42934) was identified in the OpenIPMI package used in Red Hat Enterprise Linux 9.2 Extended Update Support. The issue involves a missing check on the authorization type for incoming LAN messages in the IPMI simulator component. This could potentially allow unauthorized access or actions via IPMI LAN messages. Red Hat has released an update to address this vulnerability.

The OpenIPMI package, which provides command-line tools for managing and monitoring systems via the Intelligent Platform Management Interface (IPMI), contained a security flaw where the authorization type on incoming LAN messages was not properly checked in the IPMI simulator. This missing authorization check (CWE-862) could allow unauthorized LAN messages to be processed. Red Hat has issued a security advisory (RHSA-2024:8081) providing an update for Red Hat Enterprise Linux 9.2 Extended Update Support to fix this issue.

Detailed information about Red Hat Security Advisory: OpenIPMI security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical deta

Red Hat Security Advisory: OpenIPMI security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:8081

https://access.redhat.com/security/updates/classification/#moderate

2308375

Canonical URL

Red Hat Security Advisory: OpenIPMI security update

openipmi

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.

CVE-2024-42934 is a vulnerability identified in OpenIPMI, an open-source implementation of the Intelligent Platform Management Interface (IPMI) protocol used for out-of-band management of computer systems. The flaw exists in versions prior to 2.0.36 within the ipmi_sim simulator component, which is used to simulate IPMI devices for testing and development purposes. The vulnerability arises from an out-of-bounds array access when processing the authentication type, classified under CWE-862 (Missing Authorization). This improper bounds checking can cause the simulator to access memory outside the intended array, leading to undefined behavior. The primary impact is denial of service (DoS), where the simulator or dependent services may crash or become unresponsive. Additionally, although with very low probability, the flaw could be exploited to bypass authentication mechanisms or execute arbitrary code, potentially compromising system integrity and confidentiality. The CVSS v3.1 base score is 5.0, reflecting medium severity, with attack vector as adjacent network (AV:A), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), and impacts on confidentiality, integrity, and availability rated as low (C:L/I:L/A:L). No public exploits have been reported yet, and no patches are linked at the time of publication, indicating that mitigation may require updating to OpenIPMI 2.0.36 or later once available.

Detailed information about CVE-2024-42934: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-42934: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-42934: n/a


Red Hat Security Advisory: OpenIPMI security updateCVE-2024-42934 0 A security vulnerability (CVE-2024-42934) was identified in the OpenIPMI package used in Red Hat Enterprise Linux 9.2 Extended Update Support. The issue involves a missing check on the authorization type for incoming LAN messages in the IPMI simulator component. This could potentially allow unauthorized access or actions via IPMI LAN messages. Red Hat has released an update to address this vulnerability. MediumVulnerability#gcve #csaf #cve-2024-42934 Join the discussion	GCVE Database	10/14/2024, 18:25:34 UTC Added: 06/25/2026, 21:47:25 UTC
CVE-2024-42934: n/aCVE-2024-42934 0 OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-42934 Join the discussion	CVE Database V5	10/09/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:42 UTC

Threats Tagged 'cve-2024-42934'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-42934'

Lead Pen Test Professional