mirror of
https://github.com/ipxe/ipxe
synced 2026-10-07 15:05:42 +03:00
Michael Brown
21d972d741
Using a CBC-mode cipher with a length that is not a multiple of the block size will cause an uncontrollable out-of-bounds write of the entire address space, resulting in a guaranteed crash. There is no way to cause the CBC cipher to return before overwriting the entire address space with pseudorandom data, and so this could only be used as a denial-of-service attack. Almost all cipher call sites already validate the length against the block size. Add the relevant checks to the two call sites that do not already do so. Signed-off-by: Michael Brown <mcb30@ipxe.org>
iPXE network bootloader
iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as:
-
boot from a web server via HTTP or HTTPS,
-
boot from an iSCSI, FCoE, or AoE SAN,
-
control the boot process with a script,
You can use iPXE to replace the existing PXE ROM on your network card, or you can chainload into iPXE to obtain the features of iPXE without the hassle of reflashing.
iPXE is free, open-source software licensed under the GNU GPL (with some portions under GPL-compatible licences).
You can download the rolling release binaries (built from the latest commit), or use the most recent stable release.
For full documentation, visit the iPXE website.