VDB
RHSA-2026:89905
RHSA-2026:89905
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log (SEL) responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrary code execution.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | freeipmi-0:1.6.20-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-0:1.6.20-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-ipmiseld-debuginfo-0:1.6.20-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-bmc-watchdog-0:1.6.20-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-bmc-watchdog-0:1.6.20-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-bmc-watchdog-debuginfo-0:1.6.20-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-ipmiseld-debuginfo-0:1.6.20-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-0:1.6.20-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-bmc-watchdog-debuginfo-0:1.6.20-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debuginfo-0:1.6.20-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-ipmiseld-0:1.6.20-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-debugsource-0:1.6.20-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-ipmiseld-debuginfo-0:1.6.20-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
| Red Hat | freeipmi-ipmidetectd-debuginfo-0:1.6.20-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 1.6.20-1.el10 |
…and 41 more
Timeline
- Oct 26, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:89905 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528390 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528396 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528398 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528399 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528400 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2528401 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89905.json advisory
- https://access.redhat.com/security/cve/CVE-2026-85504 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85504 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85504 advisory
- https://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gz advisory
- https://www.gnu.org/software/freeipmi/ advisory
- https://www.openwall.com/lists/oss-security/2026/08/28/5 advisory
- https://access.redhat.com/security/cve/CVE-2026-85505 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85505 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85505 advisory
- https://access.redhat.com/security/cve/CVE-2026-85506 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-85506 advisory
…and 10 more