PT-2026-85399

CVE-2026-85505

·

Published

2026-09-04

·

Updated

2026-10-26

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19
Description The ipmi-oem component contains a stack-based buffer over-read, which occurs when the ipmi oem fujitsu get sel entry long text() function in ipmi-oem/ipmi-oem-fujitsu.c processes a short response provided by a Baseboard Management Controller (BMC). A buffer over-read is a condition where a program reads data past the end of the intended buffer, potentially exposing sensitive information from the stack.
Recommendations Update to version 1.6.19.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:89753
ALSA-2026:89754
ALSA-2026:89905
AZL-99107
CLSA-2026-1792162546
OESA-2026-3900
OESA-2026-3901
OESA-2026-4065
OPENSUSE-SU-2026:11797-1
OPENSUSE-SU-2026:21883-1
SUSE-SU-2026:23746-1
SUSE-SU-2026:4277-1
USN-8843-1
Found an issue in the description? Have something to add? Feel free to write us 👾