FreeIPMI up to 1.6.18 Fujitsu Sel String ipmi-sel-string-fujitsu-irmc-common.c _ipmi_sel_oem_fujitsu_get_sel_entry_long_text buffer overflow

Summaryinfo

A vulnerability was found in FreeIPMI up to 1.6.18. It has been classified as very critical. The impacted element is the function _ipmi_sel_oem_fujitsu_get_sel_entry_long_text of the file libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c of the component Fujitsu Sel String Handler. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2026-85504. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in FreeIPMI up to 1.6.18 and classified as very critical. This issue affects the function _ipmi_sel_oem_fujitsu_get_sel_entry_long_text of the file libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c of the component Fujitsu Sel String Handler. The manipulation with an unknown input leads to a buffer overflow vulnerability. Using CWE to declare the problem leads to CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.

The advisory is shared at openwall.com. The identification of this vulnerability is CVE-2026-85504 since 09/04/2026. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/04/2026).

Upgrading to version 1.6.19 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• FreeIPMI

Version

• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.5
• 1.6.6
• 1.6.7
• 1.6.8
• 1.6.9
• 1.6.10
• 1.6.11
• 1.6.12
• 1.6.13
• 1.6.14
• 1.6.15
• 1.6.16
• 1.6.17
• 1.6.18

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion