CVE-2026-85504: Buffer Overflow
FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.19-1 - Upgrade
Upgrade
debian/freeipmito a version that resolves this vulnerability.Fixed in 1.6.19-1 - Upgrade
Upgrade
FreeIPMIto a version that resolves this vulnerability.Fixed in 1.6.19
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using FreeIPMI versions before 1.6.19 are affected when they process Fujitsu SEL long-text responses through the vulnerable SEL parsing code.
What must an attacker provide to trigger the overflow?
An attacker needs to cause malformed Fujitsu SEL long-text responses to be processed. The supplied severity vector indicates network reachability, low attack complexity, and no required privileges or user interaction.
What is the remediation?
Upgrade FreeIPMI to version 1.6.19 or later. The affected versions are those before 1.6.19.