CVE-2026-85507: Buffer Overflow
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.19-1 - Upgrade
Upgrade
debian/freeipmito a version that resolves this vulnerability.Fixed in 1.6.19-1 - Upgrade
Upgrade
FreeIPMIto a version that resolves this vulnerability.Fixed in 1.6.19
Event History
Frequently Asked Questions
Which FreeIPMI versions are affected?
FreeIPMI releases before 1.6.19 are affected. The issue is in the ipmi-oem utility's Dell-specific implementation.
What conditions are required to exploit this issue?
The provided vector indicates network-based exploitation with low attack complexity, no privileges, and no user interaction. The vulnerable code path is associated with the cmc-info subcommand used by dell get-system-info.
What is the impact of successful exploitation?
Successful exploitation can result in high impact to confidentiality, integrity, and availability. The flaw is a stack-based buffer overflow.