ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeipmi-bmc-watchdogUpgrade freeipmiUpgrade freeipmi-ipmiseldUpgrade freeipmi-ipmidetectdUpgrade freeipmi-devel | Jul 8, 2026 | Jul 7, 2026 |
| Oracle_linux | — | Upgrade freeipmi-develUpgrade freeipmi-bmc-watchdogUpgrade freeipmi-ipmiseldUpgrade freeipmiUpgrade freeipmi-ipmidetectd | Oct 22, 2026 | Jun 3, 2026 |
| Redhat_linux | — | Upgrade freeipmi-bmc-watchdog-debuginfoUpgrade freeipmi-ipmidetectd-debuginfoNo solution existsUpgrade freeipmi-bmc-watchdogUpgrade freeipmi-debuginfoUpgrade freeipmi-ipmiseld-debuginfoUpgrade freeipmi-debugsourceUpgrade freeipmi-develUpgrade freeipmi-ipmidetectdUpgrade freeipmi-ipmiseldUpgrade freeipmi | Jul 9, 2026 | Jun 3, 2026 |
| Rocky_linux | — | Upgrade freeipmi-develUpgrade freeipmi-ipmidetectdUpgrade freeipmiUpgrade freeipmi-debugsourceUpgrade freeipmi-bmc-watchdogUpgrade freeipmi-ipmiseldUpgrade freeipmi-bmc-watchdog-debuginfoUpgrade freeipmi-ipmidetectd-debuginfoUpgrade freeipmi-ipmiseld-debuginfoUpgrade freeipmi-debuginfo | Jul 10, 2026 | Jul 8, 2026 |
| Ubuntu | — | Upgrade freeipmi-toolsUpgrade freeipmi-tools (Ubuntu Pro) | Jul 28, 2026 | Jul 27, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub