ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeipmi-bmc-watchdogUpgrade freeipmi-develUpgrade freeipmiUpgrade freeipmi-ipmiseldUpgrade freeipmi-ipmidetectd | Jul 8, 2026 | Jul 7, 2026 |
| Oracle_linux | — | Upgrade freeipmiUpgrade freeipmi-bmc-watchdogUpgrade freeipmi-ipmiseldUpgrade freeipmi-ipmidetectdUpgrade freeipmi-devel | Oct 22, 2026 | Jun 3, 2026 |
| Redhat_linux | — | Upgrade freeipmi-bmc-watchdog-debuginfoUpgrade freeipmi-ipmidetectd-debuginfoUpgrade freeipmi-debuginfoUpgrade freeipmi-bmc-watchdogNo solution existsUpgrade freeipmi-debugsourceUpgrade freeipmi-ipmiseldUpgrade freeipmi-ipmiseld-debuginfoUpgrade freeipmi-develUpgrade freeipmiUpgrade freeipmi-ipmidetectd | Jul 9, 2026 | Jun 3, 2026 |
| Rocky_linux | — | Upgrade freeipmi-bmc-watchdogUpgrade freeipmi-develUpgrade freeipmi-debugsourceUpgrade freeipmiUpgrade freeipmi-ipmidetectdUpgrade freeipmi-ipmidetectd-debuginfoUpgrade freeipmi-bmc-watchdog-debuginfoUpgrade freeipmi-ipmiseldUpgrade freeipmi-debuginfoUpgrade freeipmi-ipmiseld-debuginfo | Jul 10, 2026 | Jul 8, 2026 |
| Ubuntu | — | Upgrade freeipmi-toolsUpgrade freeipmi-tools (Ubuntu Pro) | Jul 28, 2026 | Jul 27, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub