CVE-2026-85506: Buffer Overflow
Published Sep 4, 2026
·Updated
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in getdellsysteminfoidracinfo in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).
Affected Software
3 affected componentsFixes available
FreeIPMI<1.6.19
Microsoft azl3 freeipmi 1.6.18-1<1.6.19-1
1.6.19-1
debian/freeipmi<=1.6.10-1, <=1.6.15-1
1.6.19-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.19-1 - Upgrade
Upgrade
debian/freeipmito a version that resolves this vulnerability.Fixed in 1.6.19-1 - Upgrade
Upgrade
FreeIPMI (ipmi-oem)to a version that resolves this vulnerability.Fixed in 1.6.19
Event History
Sep 4, 2026
CVE Published
via MITRE·04:17 AM
Data Sourced
via MITRE·04:17 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Sep 5, 2026
Data Sourced
via Microsoft·08:26 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:26 AM
DescriptionSeverity
Sep 29, 2026
Data Sourced
via Debian·04:45 PM
DescriptionAffected Software
Data Sourced
via Launchpad·04:45 PM
Description
Sep 30, 2026
Data Sourced
via Ubuntu·04:45 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
Which releases contain the fix?
FreeIPMI 1.6.19 includes the fix. Versions before 1.6.19 are affected.
2
What access does an attacker need?
The supplied severity vector indicates network-reachable exploitation with no privileges or user interaction required.
3
Which functionality is involved?
The affected code is reached through the idrac-info subcommand of dell get-system-info in ipmi-oem.