Most recent entries from all

ALSA-2026:13515 — Moderate: freeipmi security update

Affected: AlmaLinux:10: freeipmi, AlmaLinux:10: freeipmi-bmc-watchdog, AlmaLinux:10: freeipmi-devel, AlmaLinux:10: freeipmi-ipmidetectd, AlmaLinux:10: freeipmi-ipmiseld

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

* freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-12837

BELL-CVE-2026-33554

Affected: Alpaquita:23: freeipmi, Alpaquita:25: freeipmi, Alpaquita:stream: freeipmi

certfr-2026-avi-0406 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu…

certfr-2026-avi-0406

EUVD-2026-324170

fkie_cve-2026-33554

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."

GHSA-382w-q5p9-3f2h

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."

msrc_CVE-2026-33554 — ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Man…

msrc_CVE-2026-33554

OESA-2026-1737 — freeipmi security update

Affected: openEuler:24.03-LTS-SP2: freeipmi

The package provides &quot;Remote-Console&quot; and &quot;System Management software&quot; based on intelligent platform management interface specification. Security Fix(es):

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. Three subcommands were found to have exploitable buffer overflows on response messages: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."(CVE-2026-33554)

openSUSE-SU-2026:10436-1 — freeipmi-1.6.17-1.1 on GA media

freeipmi-1.6.17-1.1 on GA media

RHSA-2026:39007 — Red Hat Security Advisory: freeipmi security update

freeipmi: buffer overflows on response messages via ipmi-oem freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client

SUSE-SU-2026:1754-1 — Security update for freeipmi

Security update for freeipmi

UBUNTU-CVE-2026-33554

Affected: Ubuntu:Pro:14.04:LTS: freeipmi, Ubuntu:Pro:16.04:LTS: freeipmi, Ubuntu:Pro:18.04:LTS: freeipmi, Ubuntu:Pro:20.04:LTS: freeipmi, Ubuntu:22.04:LTS: freeipmi, Ubuntu:24.04:LTS: freeipmi, Ubuntu:25.10: freeipmi, Ubuntu:26.04:LTS: freeipmi

WID-SEC-W-2026-1350 — Red Hat Enterprise Linux (freeipmi): Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder eine Speicherbeschädigung zu erreichen, wodurch möglicherweise die Ausführung von beliebigem Code ermöglicht wird.