VDB
RHSA-2026:89753
RHSA-2026:89753
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the `ipmi-oem` utility when processing the `dell get-system-info cmc-info` subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | freeipmi-devel-0:1.6.20-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmiseld-0:1.6.20-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmidetectd-0:1.6.20-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmiseld-debuginfo-0:1.6.20-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmiseld-debuginfo-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-bmc-watchdog-0:1.6.20-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-bmc-watchdog-debuginfo-0:1.6.20-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-ipmiseld-0:1.6.20-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-bmc-watchdog-0:1.6.20-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-0:1.6.20-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-bmc-watchdog-debuginfo-0:1.6.20-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | 1.6.20-1.el9 |
…and 53 more
Timeline
- Oct 26, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:89753 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528390 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528396 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528398 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528399 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528400 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528401 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89753.json advisory
- https://access.redhat.com/security/cve/CVE-2026-85504 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85504 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85504 advisory
- https://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gz advisory
- https://www.gnu.org/software/freeipmi/ advisory
- https://www.openwall.com/lists/oss-security/2026/08/28/5 advisory
- https://access.redhat.com/security/cve/CVE-2026-85505 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85505 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85505 advisory
- https://access.redhat.com/security/cve/CVE-2026-85506 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85506 advisory
…and 10 more