Executive brief
FreeIPMI is a widely-used open-source tool suite for monitoring and managing server hardware (IPMI). A stack-based buffer overflow in the ipmi-oem tool's Dell-specific commands allows an attacker to crash the application or execute arbitrary code on systems running vulnerable versions. This affects server administrators and automated infrastructure management tools that rely on ipmi-oem for hardware monitoring and configuration.
Technical details
A stack-based buffer overflow exists in the _output_dell_system_info_cmc_ipv6_info function in ipmi-oem/ipmi-oem-dell.c, triggered via the cmc-ipv6-info subcommand to the dell get-system-info command. The vulnerability allows an attacker to overflow a stack buffer and potentially execute arbitrary code. Exploitation requires the attacker to issue a crafted IPMI command; attack surface depends on network access to the BMC or local access to issue IPMI commands. The vulnerability is fixed in FreeIPMI 1.6.19 and later versions (including 1.7.0 beta releases).
Affected products
- GNU FreeIPMI before 1.6.19
Timeline
- 2026-09-04: disclosed
- 2026-08-27: patched: FreeIPMI 1.6.19 released