Red Hat Security AdvisoryRHSA-2020:2286
ipmitool security update
Released 2020-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) ipmitool-1.8.18-9.el7_6
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) bmc-snmp-proxy-1.8.18-9.el7_6, exchange-bmc-os-info-1.8.18-9.el7_6
- Red Hat Enterprise Linux Server EUS (v. 7.6) ipmitool-1.8.18-9.el7_6
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) bmc-snmp-proxy-1.8.18-9.el7_6, exchange-bmc-os-info-1.8.18-9.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ipmitool-1.8.18-9.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bmc-snmp-proxy-1.8.18-9.el7_6, exchange-bmc-os-info-1.8.18-9.el7_6
Fixes 1 record
Priority MEDIUM 44
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the i…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0329 · Published 2020-02-05 · Fixed in < 1.8.19 CWE-120