CVE-2026-85508: Buffer Overflow
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.19-1 - Upgrade
Upgrade
debian/freeipmito a version that resolves this vulnerability.Fixed in 1.6.19-1 - Upgrade
Upgrade
FreeIPMI ipmi-oemto a version that resolves this vulnerability.Fixed in 1.6.19
Event History
Frequently Asked Questions
Which versions are affected?
FreeIPMI versions before 1.6.19 are affected in the ipmi-oem Dell implementation.
What component and operation trigger the overflow?
The stack-based buffer overflow is in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c. It is associated with the cmc-ipv6-info subcommand of dell get-system-info.
Is authentication or user interaction required according to the severity vector?
The supplied vector indicates network attackability with low complexity and no required privileges or user interaction. It also indicates high impact to confidentiality, integrity, and availability.