PT-2026-45902

CVE-2026-50031

·

Published

2026-06-02

·

Updated

2026-09-22

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.16.18
Description The ipmi-oem client command, which implements Intelligent Platform Management Interface (IPMI) OEM commands for specific hardware vendors, contains buffer overflows on response messages. This issue specifically affects the subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text". IPMI is a specification defining interfaces for platform management, commonly used for remote power control and sensor readings.
Recommendations Update to version 1.16.18 or later. As a temporary workaround, avoid using the "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" subcommands.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:36210
ALSA-2026:36211
ALSA-2026:36307
AZL-89328
CLSA-2026-1783597433
CLSA-2026-1785840756
OESA-2026-2876
OESA-2026-2877
OESA-2026-2878
OESA-2026-2879
OPENSUSE-SU-2026:11020-1
OPENSUSE-SU-2026:21088-1
RHSA-2026:36210
RHSA-2026:36211
RHSA-2026:36307
RHSA-2026:39006
RHSA-2026:39007
RHSA-2026:39008
RHSA-2026:39010
SUSE-SU-2026:22163-1
SUSE-SU-2026:22216-1
SUSE-SU-2026:22243-1
SUSE-SU-2026:22246-1
SUSE-SU-2026:2679-1
SUSE-SU-2026:4277-1
USN-8613-1
Found an issue in the description? Have something to add? Feel free to write us 👾