Buffer overflow in BIOS for proliant Gen10

[itsequans]

Did you know that it looks like to exist a buffer overflow in Proliant Gen10 servers over UEFI ?

When you set a boot option and the UEFI device path is longer than 256 characters, once this option is enabled, you enter a buffer overflow making the BIOS corrupted, and having the ILO card unable to communicate longer with the motherboard and the BIOS unable to communicate too with the power management. Sometimes you can aloso crash the BIOS at the boot and get a strange red screen similar to the famous Microosoift blue screen.

The only solution in such situation is to hard reset the BIOS with a jumper directly on the motherboard

[support_s]

System recommended content:

1. HPESBHF04211 rev.1 - HPE Gen10 and Gen10 Plus Servers Using Integrated Lights-Out 5 (iLO 5), Remote Buffer Overflow

2. HPESBHF04133 rev.2 - HPE ProLiant Servers, Apollo Products, Moonshot and Edgeline Blades, and Storage Products with Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local Vulnerabilities

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[Suman_1978]

Hi,

Please check if the issue you are referring to is mentioned in the bulletin.

HPESBHF04192 rev.2 - HPE ProLiant and ProLiant Server Blades, Apollo, and Synergy Gen10 and Gen10 Plus Servers, Multiple Local Vulnerabilities in UEFI BIOS

HPESBHF04211 rev.1 - HPE Gen10 and Gen10 Plus Servers Using Integrated Lights-Out 5 (iLO 5), Remote Buffer Overflow

To report a potential security vulnerability for any HPE supported product:
Web Form: https://www.hpe.com/info/report-security-vulnerability

Thank You!
I work with HPE but opinions expressed here are mine.
Recent Support Video Releases