https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:27:20.792555+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:13515 ALSA-2026:13515 — Moderate: freeipmi security update 2026-10-06T19:27:20.819874+00:00

Affected: AlmaLinux:10: freeipmi, AlmaLinux:10: freeipmi-bmc-watchdog, AlmaLinux:10: freeipmi-devel, AlmaLinux:10: freeipmi-ipmidetectd, AlmaLinux:10: freeipmi-ipmiseld

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

* freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-12837 bdu:2026-12837 2026-10-06T19:27:20.819952+00:00 bdu:2026-12837 https://cve.radiocsirt.org/vuln/bell-cve-2026-33554 BELL-CVE-2026-33554 2026-10-06T19:27:20.819970+00:00

Affected: Alpaquita:23: freeipmi, Alpaquita:25: freeipmi, Alpaquita:stream: freeipmi

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0406 certfr-2026-avi-0406 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-06T19:27:20.819990+00:00 certfr-2026-avi-0406 https://cve.radiocsirt.org/vuln/euvd-2026-324170 EUVD-2026-324170 2026-10-06T19:27:20.820005+00:00 EUVD-2026-324170 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33554 fkie_cve-2026-33554 2026-10-06T19:27:20.820015+00:00

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."

 https://cve.radiocsirt.org/vuln/ghsa-382w-q5p9-3f2h GHSA-382w-q5p9-3f2h 2026-10-06T19:27:20.820043+00:00

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-33554 msrc_CVE-2026-33554 — ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Man… 2026-10-06T19:27:20.820063+00:00 msrc_CVE-2026-33554 https://cve.radiocsirt.org/vuln/oesa-2026-1737 OESA-2026-1737 — freeipmi security update 2026-10-06T19:27:20.820082+00:00

Affected: openEuler:24.03-LTS-SP2: freeipmi

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fix(es):

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. Three subcommands were found to have exploitable buffer overflows on response messages: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."(CVE-2026-33554)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10436-1 openSUSE-SU-2026:10436-1 — freeipmi-1.6.17-1.1 on GA media 2026-10-06T19:27:20.820110+00:00

freeipmi-1.6.17-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:39007 RHSA-2026:39007 — Red Hat Security Advisory: freeipmi security update 2026-10-06T19:27:20.820125+00:00

freeipmi: buffer overflows on response messages via ipmi-oem freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client

 https://cve.radiocsirt.org/vuln/suse-su-2026:1754-1 SUSE-SU-2026:1754-1 — Security update for freeipmi 2026-10-06T19:27:20.820141+00:00

Security update for freeipmi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33554 UBUNTU-CVE-2026-33554 2026-10-06T19:27:20.820154+00:00

Affected: Ubuntu:Pro:14.04:LTS: freeipmi, Ubuntu:Pro:16.04:LTS: freeipmi, Ubuntu:Pro:18.04:LTS: freeipmi, Ubuntu:Pro:20.04:LTS: freeipmi, Ubuntu:22.04:LTS: freeipmi, Ubuntu:24.04:LTS: freeipmi, Ubuntu:25.10: freeipmi, Ubuntu:26.04:LTS: freeipmi

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1350 WID-SEC-W-2026-1350 — Red Hat Enterprise Linux (freeipmi): Schwachstelle ermöglicht Codeausführung 2026-10-06T19:27:20.820188+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder eine Speicherbeschädigung zu erreichen, wodurch möglicherweise die Ausführung von beliebigem Code ermöglicht wird.