It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ipmitool | May 8, 2020 | Feb 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade bmc-snmp-proxyUpgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade exchange-bmc-os-info | May 8, 2020 | Feb 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 5, 2020 |
| Centos_linux | — | Upgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmitool-debuginfoUpgrade exchange-bmc-os-infoUpgrade ipmitool-debugsourceUpgrade ipmievd-debuginfoUpgrade ipmievd | Mar 27, 2020 | Feb 5, 2020 |
| Debian | — | Upgrade ipmitool | Feb 11, 2020 | Feb 5, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/ipmitool. | Jan 11, 2021 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipmitool | Jun 17, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipmitool | Apr 16, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipmitool | Feb 24, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ipmievdUpgrade ipmitool | Feb 26, 2020 | Feb 5, 2020 |
| Oracle_linux | — | Upgrade exchange-bmc-os-infoUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmievd | Mar 27, 2020 | Feb 5, 2020 |
| Redhat_linux | — | Upgrade ipmitool-debuginfoUpgrade ipmievdUpgrade exchange-bmc-os-infoUpgrade ipmievd-debuginfoUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmitool-debugsource | Mar 27, 2020 | Feb 5, 2020 |
| Suse | — | Upgrade ipmitool-bmc-snmp-proxyUpgrade ipmitool | Mar 3, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade ipmitool (Ubuntu Pro)Upgrade ipmitool | Apr 10, 2023 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub