FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade freeipmi-ipmiseldUpgrade freeipmi-bmc-watchdog-debuginfoUpgrade freeipmi-bmc-watchdogUpgrade freeipmi-ipmiseld-debuginfoUpgrade freeipmiUpgrade freeipmi-ipmidetectdUpgrade freeipmi-develUpgrade freeipmi-ipmidetectd-debuginfoUpgrade freeipmi-debugsourceUpgrade freeipmi-debuginfo | Sep 30, 2026 | Sep 4, 2026 |
| Redhat_linux | — | No solution exists | Sep 7, 2026 | Sep 4, 2026 |
| Ubuntu | — | Upgrade libfreeipmi12 (Ubuntu Pro)Upgrade libfreeipmi16 (Ubuntu Pro)Upgrade libfreeipmi17Upgrade freeipmi-toolsUpgrade libfreeipmi17 (Ubuntu Pro)Upgrade libfreeipmi-dev (Ubuntu Pro)Upgrade freeipmi-tools (Ubuntu Pro) | Oct 6, 2026 | Sep 29, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub