It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ipmitool | May 8, 2020 | Feb 5, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bmc-snmp-proxyamazon-linux-ami-2-upgrade-exchange-bmc-os-infoamazon-linux-ami-2-upgrade-ipmitoolamazon-linux-ami-2-upgrade-ipmitool-debuginfo | May 8, 2020 | Feb 5, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 5, 2020 | |
| Centos_linux | — | centos-upgrade-bmc-snmp-proxycentos-upgrade-exchange-bmc-os-infocentos-upgrade-ipmievdcentos-upgrade-ipmievd-debuginfocentos-upgrade-ipmitoolcentos-upgrade-ipmitool-debuginfocentos-upgrade-ipmitool-debugsource | Mar 27, 2020 | Feb 5, 2020 |
| Debian | debian-upgrade-ipmitool | Feb 11, 2020 | Feb 5, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-apps-ipmitool | Jan 11, 2021 | Feb 5, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-ipmitool | Jun 17, 2020 | Feb 5, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-ipmitool | Apr 16, 2020 | Feb 5, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-ipmitool | Feb 24, 2020 | Feb 5, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ipmievdhuawei-euleros-2_0_sp8-upgrade-ipmitool | Feb 26, 2020 | Feb 5, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-bmc-snmp-proxyoracle-linux-upgrade-exchange-bmc-os-infooracle-linux-upgrade-ipmievdoracle-linux-upgrade-ipmitool | Mar 27, 2020 | Feb 5, 2020 |
| Redhat_linux | redhat-upgrade-bmc-snmp-proxyredhat-upgrade-exchange-bmc-os-inforedhat-upgrade-ipmievdredhat-upgrade-ipmievd-debuginforedhat-upgrade-ipmitoolredhat-upgrade-ipmitool-debuginforedhat-upgrade-ipmitool-debugsource | Mar 27, 2020 | Feb 5, 2020 | |
| Suse | — | suse-upgrade-ipmitoolsuse-upgrade-ipmitool-bmc-snmp-proxy | Mar 3, 2020 | Feb 5, 2020 |
| Ubuntu | ubuntu-pro-upgrade-ipmitoolubuntu-upgrade-ipmitool | Apr 10, 2023 | Feb 5, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub