Executive brief
FreeIPMI is a library for IPMI (Intelligent Platform Management Interface) communication, which is used for hardware monitoring and management on servers and other systems. A stack-based buffer overflow vulnerability in the Fujitsu SEL (System Event Log) parsing code allows an attacker to crash the service or execute arbitrary code if the library processes a malformed SEL response from a Fujitsu BMC device.
Technical details
The vulnerability is a stack-based buffer overflow in the _ipmi_sel_oem_fujitsu_get_sel_entry_long_text function in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c. The flaw is triggered when processing malformed Fujitsu SEL long-text responses, which fail to properly validate input length before writing to a fixed-size stack buffer. An attacker controlling a Fujitsu BMC device or intercepting IPMI communication can send a specially crafted SEL response to trigger the overflow. This allows code execution with the privileges of the IPMI management tool or daemon. The vulnerability is fixed in FreeIPMI 1.6.19 and later versions.
Affected products
- GNU FreeIPMI before 1.6.19
Timeline
- 2026-09-04: disclosed
- 2026-08-27: patched: FreeIPMI 1.6.19 released