ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade freeipmi-bmc-watchdog-debuginfoUpgrade freeipmi-ipmidetectd-debuginfoUpgrade freeipmi-develUpgrade freeipmi-debugsourceUpgrade freeipmi-debuginfoUpgrade freeipmi-ipmiseld-debuginfoUpgrade freeipmiUpgrade freeipmi-ipmidetectdUpgrade freeipmi-ipmiseldUpgrade freeipmi-bmc-watchdog | Sep 30, 2026 | Sep 4, 2026 |
| Redhat_linux | — | No solution exists | Sep 7, 2026 | Sep 4, 2026 |
| Ubuntu | — | Upgrade libfreeipmi16 (Ubuntu Pro)Upgrade libfreeipmi12 (Ubuntu Pro)Upgrade libfreeipmi17Upgrade libfreeipmi17 (Ubuntu Pro)Upgrade freeipmi-tools (Ubuntu Pro)Upgrade libfreeipmi-dev (Ubuntu Pro)Upgrade freeipmi-tools | Oct 6, 2026 | Sep 29, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub