It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ipmitool | May 8, 2020 | Feb 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipmitoolUpgrade exchange-bmc-os-infoUpgrade ipmitool-debuginfoUpgrade bmc-snmp-proxy | May 8, 2020 | Feb 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 5, 2020 |
| Centos_linux | — | Upgrade bmc-snmp-proxyUpgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade ipmievdUpgrade exchange-bmc-os-infoUpgrade ipmitool-debugsourceUpgrade ipmievd-debuginfo | Mar 27, 2020 | Feb 5, 2020 |
| Debian | — | Upgrade ipmitool | Feb 11, 2020 | Feb 5, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/ipmitool. | Jan 11, 2021 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipmitool | Jun 17, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipmitool | Apr 16, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipmitool | Feb 24, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ipmievdUpgrade ipmitool | Feb 26, 2020 | Feb 5, 2020 |
| Oracle_linux | — | Upgrade exchange-bmc-os-infoUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmievd | Mar 27, 2020 | Feb 5, 2020 |
| Redhat_linux | — | Upgrade ipmievdUpgrade exchange-bmc-os-infoUpgrade ipmitool-debuginfoUpgrade ipmievd-debuginfoUpgrade ipmitool-debugsourceUpgrade bmc-snmp-proxyUpgrade ipmitool | Mar 27, 2020 | Feb 5, 2020 |
| Suse | — | Upgrade ipmitoolUpgrade ipmitool-bmc-snmp-proxy | Mar 3, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade ipmitoolUpgrade ipmitool (Ubuntu Pro) | Apr 10, 2023 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub