It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ipmitool | May 8, 2020 | Feb 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade exchange-bmc-os-infoUpgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade bmc-snmp-proxy | May 8, 2020 | Feb 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 5, 2020 |
| Centos_linux | — | Upgrade ipmievdUpgrade ipmitool-debugsourceUpgrade exchange-bmc-os-infoUpgrade ipmievd-debuginfoUpgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade bmc-snmp-proxy | Mar 27, 2020 | Feb 5, 2020 |
| Debian | — | Upgrade ipmitool | Feb 11, 2020 | Feb 5, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/ipmitool. | Jan 11, 2021 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipmitool | Jun 17, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipmitool | Apr 16, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipmitool | Feb 24, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ipmitoolUpgrade ipmievd | Feb 26, 2020 | Feb 5, 2020 |
| Oracle_linux | — | Upgrade exchange-bmc-os-infoUpgrade bmc-snmp-proxyUpgrade ipmitoolUpgrade ipmievd | Mar 27, 2020 | Feb 5, 2020 |
| Redhat_linux | — | Upgrade exchange-bmc-os-infoUpgrade ipmievdUpgrade ipmitool-debuginfoUpgrade ipmievd-debuginfoUpgrade ipmitoolUpgrade ipmitool-debugsourceUpgrade bmc-snmp-proxy | Mar 27, 2020 | Feb 5, 2020 |
| Suse | — | Upgrade ipmitoolUpgrade ipmitool-bmc-snmp-proxy | Mar 3, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade ipmitool (Ubuntu Pro)Upgrade ipmitool | Apr 10, 2023 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub