Read the docs
TI-2020-04264 Aliases CVE-2020-5208

remote code execution vulnerability in ipmitool

Priority MEDIUM 44CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-120 and the CVSS impact.

Summary

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Why it matters now

EPSS 0.0329 88th percentileScored 2026-11-07
Fix Fixed ipmitool (ipmitool): < 1.8.19Red Hat: 9 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ipmitoolipmitoolbefore < 1.8.19< 1.8.19Patch availableCNA
  • ipmitool Vendoripmitool Affected before < 1.8.19 Fixed in < 1.8.19 Patch available CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:ipmitool_project:ipmitool:1.8.18:*:*:*:*:*:*:*1.8.18VulnerableIpmitool Project
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*30VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
  • cpe:2.3:a:ipmitool_project:ipmitool:1.8.18:*:*:*:*:*:*:* Versions 1.8.18 Vulnerable ·Ipmitool Project
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE

Remediation

  • Fix · CNA ipmitool (ipmitool) Fixed in < 1.8.19

Red Hat 9 advisories

  • RHSA-2020:2286 Released 2020-05-26 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) ipmitool-1.8.18-9.el7_6
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) bmc-snmp-proxy-1.8.18-9.el7_6, exchange-bmc-os-info-1.8.18-9.el7_6
    • Red Hat Enterprise Linux Server EUS (v. 7.6) ipmitool-1.8.18-9.el7_6
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.6) bmc-snmp-proxy-1.8.18-9.el7_6, exchange-bmc-os-info-1.8.18-9.el7_6
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ipmitool-1.8.18-9.el7_6
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bmc-snmp-proxy-1.8.18-9.el7_6, exchange-bmc-os-info-1.8.18-9.el7_6
  • RHSA-2020:2284 Released 2020-05-26 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) ipmitool-1.8.13-10.el7_2
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) bmc-snmp-proxy-1.8.13-10.el7_2, exchange-bmc-os-info-1.8.13-10.el7_2
  • RHSA-2020:2276 Released 2020-05-26 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) ipmitool-1.8.15-8.el7_3
    • Red Hat Enterprise Linux Server E4S (v. 7.3) ipmitool-1.8.15-8.el7_3
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) bmc-snmp-proxy-1.8.15-8.el7_3, exchange-bmc-os-info-1.8.15-8.el7_3
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.3) bmc-snmp-proxy-1.8.15-8.el7_3, exchange-bmc-os-info-1.8.15-8.el7_3
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.3) bmc-snmp-proxy-1.8.15-8.el7_3, exchange-bmc-os-info-1.8.15-8.el7_3
    • Red Hat Enterprise Linux Server TUS (v. 7.3) ipmitool-1.8.15-8.el7_3
Show 6 more Red Hat advisories
  • RHSA-2020:2213 Released 2020-05-19 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux Server AUS (v. 7.4) ipmitool-1.8.18-6.el7_4
    • Red Hat Enterprise Linux Server E4S (v. 7.4) ipmitool-1.8.18-6.el7_4
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.4) bmc-snmp-proxy-1.8.18-6.el7_4, exchange-bmc-os-info-1.8.18-6.el7_4
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.4) bmc-snmp-proxy-1.8.18-6.el7_4, exchange-bmc-os-info-1.8.18-6.el7_4
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.4) bmc-snmp-proxy-1.8.18-6.el7_4, exchange-bmc-os-info-1.8.18-6.el7_4
    • Red Hat Enterprise Linux Server TUS (v. 7.4) ipmitool-1.8.18-6.el7_4
  • RHSA-2020:1486 Released 2020-04-16 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) ipmitool-1.8.18-9.el7_5
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) bmc-snmp-proxy-1.8.18-9.el7_5, exchange-bmc-os-info-1.8.18-9.el7_5
    • Red Hat Enterprise Linux Server EUS (v. 7.5) ipmitool-1.8.18-9.el7_5
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.5) bmc-snmp-proxy-1.8.18-9.el7_5, exchange-bmc-os-info-1.8.18-9.el7_5
  • RHSA-2020:1331 Released 2020-04-06 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux Desktop Optional (v. 6) ipmitool-1.8.15-3.el6_10
    • Red Hat Enterprise Linux HPC Node (v. 6) ipmitool-1.8.15-3.el6_10
    • Red Hat Enterprise Linux Server (v. 6) ipmitool-1.8.15-3.el6_10
    • Red Hat Enterprise Linux Workstation (v. 6) ipmitool-1.8.15-3.el6_10
  • RHSA-2020:0984 Released 2020-03-26 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux ComputeNode (v. 7) ipmitool-1.8.18-9.el7_7
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) bmc-snmp-proxy-1.8.18-9.el7_7, exchange-bmc-os-info-1.8.18-9.el7_7
    • Red Hat Enterprise Linux Server (v. 7) ipmitool-1.8.18-9.el7_7
    • Red Hat Enterprise Linux Server Optional (v. 7) bmc-snmp-proxy-1.8.18-9.el7_7, exchange-bmc-os-info-1.8.18-9.el7_7
    • Red Hat Enterprise Linux Workstation (v. 7) ipmitool-1.8.18-9.el7_7
    • Red Hat Enterprise Linux Workstation Optional (v. 7) bmc-snmp-proxy-1.8.18-9.el7_7, exchange-bmc-os-info-1.8.18-9.el7_7
  • RHSA-2020:0981 Released 2020-03-26 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux AppStream (v. 8) exchange-bmc-os-info-1.8.18-12.el8_1, ipmievd-1.8.18-12.el8_1, ipmitool-1.8.18-12.el8_1
  • RHSA-2020:0979 Released 2020-03-26 · Red Hat rating Important
    ipmitool security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.0) exchange-bmc-os-info-1.8.18-12.el8_0, ipmievd-1.8.18-12.el8_0, ipmitool-1.8.18-12.el8_0

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:0981
Red Hat Enterprise Linux AppStream E4S (v. 8.0)Fixed RHSA-2020:0979
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2020:0984
Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)Fixed RHSA-2020:1486
Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)Fixed RHSA-2020:2286
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:0984
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)Fixed RHSA-2020:1486
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)Fixed RHSA-2020:2286
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2020:1331
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2020:1331
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2020:1331
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:0984
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2020:2284
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2020:2276
Red Hat Enterprise Linux Server AUS (v. 7.4)Fixed RHSA-2020:2213
Red Hat Enterprise Linux Server E4S (v. 7.3)Fixed RHSA-2020:2276
Red Hat Enterprise Linux Server E4S (v. 7.4)Fixed RHSA-2020:2213
Red Hat Enterprise Linux Server EUS (v. 7.5)Fixed RHSA-2020:1486
Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2020:2286
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2020:0984
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2020:2284
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2020:2276
Red Hat Enterprise Linux Server Optional AUS (v. 7.4)Fixed RHSA-2020:2213
Red Hat Enterprise Linux Server Optional E4S (v. 7.3)Fixed RHSA-2020:2276
Red Hat Enterprise Linux Server Optional E4S (v. 7.4)Fixed RHSA-2020:2213
Red Hat Enterprise Linux Server Optional EUS (v. 7.5)Fixed RHSA-2020:1486
Red Hat Enterprise Linux Server Optional EUS (v. 7.6)Fixed RHSA-2020:2286
Red Hat Enterprise Linux Server Optional TUS (v. 7.3)Fixed RHSA-2020:2276
Red Hat Enterprise Linux Server Optional TUS (v. 7.4)Fixed RHSA-2020:2213
Red Hat Enterprise Linux Server TUS (v. 7.3)Fixed RHSA-2020:2276
Red Hat Enterprise Linux Server TUS (v. 7.4)Fixed RHSA-2020:2213
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2020:1331
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:0984
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2020:0984
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2020:2286
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2020:2286

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-5208

References

Patch 2

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences