VDB
RHSA-2026:89754
RHSA-2026:89754
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log (SEL) responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrary code execution.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | freeipmi-ipmiseld-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmiseld-0:1.6.20-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmidetectd-0:1.6.20-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-devel-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-bmc-watchdog-debuginfo-0:1.6.20-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-bmc-watchdog-debuginfo-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-0:1.6.20-1.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-devel-0:1.6.20-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | 1.6.20-1.el8 |
…and 53 more
Timeline
- Oct 26, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:89754 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528390 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528396 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528398 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528399 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528400 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528401 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89754.json advisory
- https://access.redhat.com/security/cve/CVE-2026-85504 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85504 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85504 advisory
- https://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gz advisory
- https://www.gnu.org/software/freeipmi/ advisory
- https://www.openwall.com/lists/oss-security/2026/08/28/5 advisory
- https://access.redhat.com/security/cve/CVE-2026-85505 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85505 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85505 advisory
- https://access.redhat.com/security/cve/CVE-2026-85506 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85506 advisory
…and 10 more