https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-39295.htmlhttps://patchthecve.com/cve/CVE-2021-39295.htmlWed, 17 Jun 2026 04:03:28 +0000HIGH 7.5: In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.https://patchthecve.com/cve/CVE-2022-35729.htmlhttps://patchthecve.com/cve/CVE-2022-35729.htmlWed, 17 Jun 2026 04:52:08 +0000HIGH 7.5: Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.https://patchthecve.com/cve/CVE-2022-3409.htmlhttps://patchthecve.com/cve/CVE-2022-3409.htmlWed, 17 Jun 2026 04:59:28 +0000HIGH 8.2: A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected probhttps://patchthecve.com/cve/CVE-2022-2809.htmlhttps://patchthecve.com/cve/CVE-2022-2809.htmlWed, 17 Jun 2026 04:42:37 +0000HIGH 8.2: A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected problem in how multipart_parser handles unclosed http headers. If long enou