CVE catalog

CVE-2026-50031

ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform ma

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.50% · Oct 27, 2026

ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfreeipmisid1.6.20-1fixed
Debianfreeipmiforky1.6.20-1fixed
Debianfreeipmitrixie1.6.15-1vulnerable
Debianfreeipmibookworm1.6.10-1vulnerable
CpefreeipmiNot reportedNot reportedvulnerable
Ubuntufreeipminoble1.6.13-3ubuntu0.1fixed
Ubuntufreeipmi-bmc-watchdognoble1.6.13-3ubuntu0.1fixed
Ubuntufreeipmi-commonnoble1.6.13-3ubuntu0.1fixed
Ubuntufreeipmi-ipmidetectnoble1.6.13-3ubuntu0.1fixed
Ubuntufreeipmi-ipmiseldnoble1.6.13-3ubuntu0.1fixed
Ubuntufreeipmi-toolsnoble1.6.13-3ubuntu0.1fixed
Ubuntulibfreeipmi-devnoble1.6.13-3ubuntu0.1fixed
Ubuntulibfreeipmi17noble1.6.13-3ubuntu0.1fixed
Ubuntulibipmiconsole-devnoble1.6.13-3ubuntu0.1fixed
Ubuntulibipmiconsole2noble1.6.13-3ubuntu0.1fixed
Ubuntulibipmidetect-devnoble1.6.13-3ubuntu0.1fixed
Ubuntulibipmidetect0noble1.6.13-3ubuntu0.1fixed
Ubuntulibipmimonitoring-devnoble1.6.13-3ubuntu0.1fixed
Ubuntulibipmimonitoring6noble1.6.13-3ubuntu0.1fixed
Susefreeipmilinux enterprise module for basesystem 15 sp71.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise high performance computing 15 sp4-espos1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise high performance computing 15 sp4-ltss1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise high performance computing 15 sp5-espos1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise high performance computing 15 sp5-ltss1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise server 15 sp4-ltss1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise server 15 sp5-ltss1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise server 15 sp6-ltss1.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise server for sap applications 15 sp41.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise server for sap applications 15 sp51.6.8-150400.3.6.1fixed
Susefreeipmilinux enterprise server for sap applications 15 sp61.6.8-150400.3.6.1fixed
Ubuntufreeipmipro1.6.3-1.1ubuntu2vulnerable
Ubuntufreeipmipro1.6.4-3ubuntu1vulnerable
Ubuntufreeipmipro1.6.4-3ubuntu1.1vulnerable
Ubuntufreeipmipro1.6.4-3ubuntu1.1+esm1fixed
Ubuntufreeipmi22.041.6.6-4vulnerable
Ubuntufreeipmi22.041.6.6-5vulnerable
Ubuntufreeipmi22.041.6.8-1vulnerable
Ubuntufreeipmi22.041.6.9-1vulnerable
Ubuntufreeipmi22.041.6.9-2vulnerable
Ubuntufreeipmi22.041.6.9-2ubuntu0.22.04.1vulnerable
Ubuntufreeipmi22.041.6.9-2ubuntu0.22.04.2vulnerable
Ubuntufreeipmi22.041.6.9-2ubuntu0.22.04.3fixed
Ubuntufreeipmi24.041.6.11-1vulnerable
Ubuntufreeipmi24.041.6.11-2vulnerable
Ubuntufreeipmi24.041.6.13-2vulnerable
Ubuntufreeipmi24.041.6.13-3vulnerable
Ubuntufreeipmi24.041.6.13-3ubuntu0.1fixed
Ubuntufreeipmi25.101.6.15-1vulnerable
Ubuntufreeipmi25.101.6.15-2vulnerable
Ubuntufreeipmi26.041.6.15-2vulnerable
Ubuntufreeipmi26.041.6.16-1vulnerable
Ubuntufreeipmi26.041.6.16-1ubuntu0.1fixed
Opensusefreeipmileap 16.01.6.15-160000.4.1fixed
Susefreeipmilinux enterprise server 12 sp5-ltss1.5.7-3.9.1fixed
Susefreeipmilinux enterprise server ltss extended security 12 sp51.5.7-3.9.1fixed
Susefreeipmilinux micro 6.11.6.14-slfo.1.1_3.1fixed
Susefreeipmilinux micro 6.01.6.11-3.1fixed
Susefreeipmilinux enterprise server 16.01.6.15-160000.4.1fixed
Susefreeipmilinux enterprise server for sap applications 16.01.6.15-160000.4.1fixed
Susefreeipmilinux micro 6.21.6.15-160000.4.1fixed
Opensusefreeipmitumbleweed1.6.18-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfreeipmisourcesid1.6.18-1not yet assignedNot reported[1138782]
Debianfreeipmisourceforky1.6.18-1not yet assignedNot reported[1138782]
Debianfreeipmisourcetrixie(unfixed)not yet assignedNot reported[1138782]
Debianfreeipmisourcebookworm(unfixed)not yet assignedNot reported[1138782]
Ubuntufreeipmidebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntufreeipmi-bmc-watchdogdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntufreeipmi-commondebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntufreeipmi-ipmidetectdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntufreeipmi-ipmiselddebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntufreeipmi-toolsdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibfreeipmi-devdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibfreeipmi17debnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibipmiconsole-devdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibipmiconsole2debnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibipmidetect-devdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibipmidetect0debnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibipmimonitoring-devdebnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibipmimonitoring6debnoble1.6.13-3ubuntu0.1Not reportedNot reportedNot reported
Susefreeipmirpmlinux enterprise module for basesystem 15 sp71.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise high performance computing 15 sp4-espos1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise high performance computing 15 sp4-ltss1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise high performance computing 15 sp5-espos1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise high performance computing 15 sp5-ltss1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise server 15 sp4-ltss1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise server 15 sp5-ltss1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise server 15 sp6-ltss1.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise server for sap applications 15 sp41.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise server for sap applications 15 sp51.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Susefreeipmirpmlinux enterprise server for sap applications 15 sp61.6.8-150400.3.6.1Not reportedSUSE-SU-2026:4277-1Not reported
Ubuntufreeipmidebpro1.6.4-3ubuntu1.1+esm1Not reportedUBUNTU-CVE-2026-50031Not reported
Ubuntufreeipmideb22.041.6.9-2ubuntu0.22.04.3Not reportedUBUNTU-CVE-2026-50031Not reported
Ubuntufreeipmideb24.041.6.13-3ubuntu0.1Not reportedUBUNTU-CVE-2026-50031Not reported
Ubuntufreeipmideb26.041.6.16-1ubuntu0.1Not reportedUBUNTU-CVE-2026-50031Not reported
Opensusefreeipmirpmleap 16.01.6.15-160000.4.1Not reportedOPENSUSE-SU-2026:21088-1Not reported
Susefreeipmirpmlinux enterprise server 12 sp5-ltss1.5.7-3.9.1Not reportedSUSE-SU-2026:2679-1Not reported
Susefreeipmirpmlinux enterprise server ltss extended security 12 sp51.5.7-3.9.1Not reportedSUSE-SU-2026:2679-1Not reported
Susefreeipmirpmlinux micro 6.11.6.14-slfo.1.1_3.1Not reportedSUSE-SU-2026:22246-1Not reported
Susefreeipmirpmlinux micro 6.01.6.11-3.1Not reportedSUSE-SU-2026:22243-1Not reported
Susefreeipmirpmlinux enterprise server 16.01.6.15-160000.4.1Not reportedSUSE-SU-2026:22163-1Not reported
Susefreeipmirpmlinux enterprise server for sap applications 16.01.6.15-160000.4.1Not reportedSUSE-SU-2026:22163-1Not reported
Susefreeipmirpmlinux micro 6.21.6.15-160000.4.1Not reportedSUSE-SU-2026:22216-1Not reported
Opensusefreeipmirpmtumbleweed1.6.18-1.1Not reportedOPENSUSE-SU-2026:11020-1Not reported

[Debian bug #1138782]

Notes

[trixie] freeipmi: Minor issue [bookworm] freeipmi: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [freeipmi]Affected
    Details (4)
    • 1.6.10-1 · all · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1 · all · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · all · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · all · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • [freeipmi-common]Affected

    Source package: [freeipmi]

    Details (4)
    • 1.6.10-1 · all · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1 · all · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · all · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · all · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • [freeipmi-tools]Affected

    Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • [libfreeipmi17]Affected

    Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • [libfreeipmi-dev]Affected

    Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • [libipmiconsole2]Affected

    Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • [libipmidetect0]Affected

    Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

  • Source package: [freeipmi]

    Details (4)
    • 1.6.10-1+b1 · amd64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.10-1+b1 · arm64 · bookworm

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

    • 1.6.13-2~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · freeipmi · debian · bookworm; nvd · freeipmi · debian · 12

[Debian 13 (Trixie)]

  • [freeipmi]Affected
    Details (2)
    • 1.6.15-1 · all · trixie

      Affected

      nvd · freeipmi · debian · 13

    • 1.6.15-1 · all · trixie

      Affected

      nvd · freeipmi · debian · 13

  • Source package: [freeipmi]

    Details (2)
    • 1.6.15-1 · amd64 · trixie

      Affected

      nvd · freeipmi · debian · 13

    • 1.6.15-1 · arm64 · trixie

      Affected

      nvd · freeipmi · debian · 13

  • [freeipmi-common]Affected

    Source package: [freeipmi]

    Details (2)
    • 1.6.15-1 · all · trixie

      Affected

      nvd · freeipmi · debian · 13

    • 1.6.15-1 · all · trixie

      Affected

      nvd · freeipmi · debian · 13

  • Source package: [freeipmi]

    Details (2)
    • 1.6.15-1 · amd64 · trixie

      Affected

      nvd · freeipmi · debian · 13

    • 1.6.15-1 · arm64 · trixie

      Affected

      nvd · freeipmi · debian · 13

  • Source package: [freeipmi]

    Details (2)
    • 1.6.15-1 · amd64 · trixie

      Affected

      nvd · freeipmi · debian · 13

    • 1.6.15-1 · arm64 · trixie

      Affected

      nvd · freeipmi · debian · 13

  • [freeipmi-tools]Affected

    Source package: [freeipmi]

    Details (2)
    • 1.6.15-1 · amd64 · trixie

      Affected

      nvd · freeipmi · debian · 13

    • 1.6.15-1 · arm64 · trixie

      Affected

      nvd · freeipmi · debian · 13

Next results

Observed:

References