CVE-2020-5208: remote code execution vulnerability in ipmitool

Published Feb 5, 2020

Updated

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Affected Software

6 affected components

Ipmitool Project Ipmitool=1.8.18

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Fedoraproject Fedora=30

Fedoraproject Fedora=31

openSUSE Leap=15.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ipmitool to a version that resolves this vulnerability.
Fixed in 1.8.19

Event History

Feb 5, 2020

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-5208?

CVE-2020-5208 has a high severity rating due to the potential for remote code execution through buffer overflow vulnerabilities.

How do I fix CVE-2020-5208?

To fix CVE-2020-5208, update ipmitool to version 1.8.19 or later to ensure proper validation of received data.

Which versions of ipmitool are affected by CVE-2020-5208?

CVE-2020-5208 affects ipmitool versions prior to 1.8.19, specifically version 1.8.18.

What platforms are impacted by CVE-2020-5208?

CVE-2020-5208 impacts multiple platforms including Debian 8.0, 9.0, Fedora 30, 31, and openSUSE Leap 15.1.

What are the risks of exploiting CVE-2020-5208?

Exploiting CVE-2020-5208 can lead to buffer overflows, allowing attackers to execute arbitrary code on systems running vulnerable versions of ipmitool.