It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ipmitool | May 8, 2020 | Feb 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade exchange-bmc-os-infoUpgrade bmc-snmp-proxy | May 8, 2020 | Feb 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 5, 2020 |
| Centos_linux | — | Upgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmitool-debugsourceUpgrade ipmievdUpgrade exchange-bmc-os-infoUpgrade ipmievd-debuginfo | Mar 27, 2020 | Feb 5, 2020 |
| Debian | — | Upgrade ipmitool | Feb 11, 2020 | Feb 5, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/ipmitool. | Jan 11, 2021 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipmitool | Jun 17, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipmitool | Apr 16, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipmitool | Feb 24, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ipmievdUpgrade ipmitool | Feb 26, 2020 | Feb 5, 2020 |
| Oracle_linux | — | Upgrade exchange-bmc-os-infoUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmievd | Mar 27, 2020 | Feb 5, 2020 |
| Redhat_linux | — | Upgrade ipmitoolUpgrade ipmievd-debuginfoUpgrade ipmitool-debugsourceUpgrade bmc-snmp-proxyUpgrade ipmitool-debuginfoUpgrade ipmievdUpgrade exchange-bmc-os-info | Mar 27, 2020 | Feb 5, 2020 |
| Suse | — | Upgrade ipmitool-bmc-snmp-proxyUpgrade ipmitool | Mar 3, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade ipmitool (Ubuntu Pro)Upgrade ipmitool | Apr 10, 2023 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 5, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub