It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ipmitool | May 8, 2020 | Feb 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipmitool-debuginfoUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade exchange-bmc-os-info | May 8, 2020 | Feb 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 5, 2020 |
| Centos_linux | — | Upgrade ipmitool-debuginfoUpgrade bmc-snmp-proxyUpgrade ipmitoolUpgrade ipmievd-debuginfoUpgrade ipmievdUpgrade exchange-bmc-os-infoUpgrade ipmitool-debugsource | Mar 27, 2020 | Feb 5, 2020 |
| Debian | — | Upgrade ipmitool | Feb 11, 2020 | Feb 5, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/ipmitool. | Jan 11, 2021 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipmitool | Jun 17, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipmitool | Apr 16, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipmitool | Feb 24, 2020 | Feb 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ipmitoolUpgrade ipmievd | Feb 26, 2020 | Feb 5, 2020 |
| Oracle_linux | — | Upgrade exchange-bmc-os-infoUpgrade ipmievdUpgrade ipmitoolUpgrade bmc-snmp-proxy | Mar 27, 2020 | Feb 5, 2020 |
| Redhat_linux | — | Upgrade ipmitool-debuginfoUpgrade exchange-bmc-os-infoUpgrade ipmievdUpgrade ipmitoolUpgrade bmc-snmp-proxyUpgrade ipmievd-debuginfoUpgrade ipmitool-debugsource | Mar 27, 2020 | Feb 5, 2020 |
| Suse | — | Upgrade ipmitool-bmc-snmp-proxyUpgrade ipmitool | Mar 3, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade ipmitool (Ubuntu Pro)Upgrade ipmitool | Apr 10, 2023 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub