FreeIPMI up to 1.6.18 ipmi-oem ipmi-oem/ipmi-oem-dell.c _output_dell_system_info_cmc_info stack-based overflow

Summaryinfo

A vulnerability labeled as very critical has been found in FreeIPMI up to 1.6.18. Affected by this issue is the function _output_dell_system_info_cmc_info of the file ipmi-oem/ipmi-oem-dell.c of the component ipmi-oem. Executing a manipulation can lead to stack-based overflow. The identification of this vulnerability is CVE-2026-85507. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability classified as very critical was found in FreeIPMI up to 1.6.18. This vulnerability affects the function _output_dell_system_info_cmc_info of the file ipmi-oem/ipmi-oem-dell.c of the component ipmi-oem. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).

The advisory is available at openwall.com. This vulnerability was named CVE-2026-85507 since 09/04/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 09/04/2026).

Upgrading to version 1.6.19 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• FreeIPMI

Version

• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.5
• 1.6.6
• 1.6.7
• 1.6.8
• 1.6.9
• 1.6.10
• 1.6.11
• 1.6.12
• 1.6.13
• 1.6.14
• 1.6.15
• 1.6.16
• 1.6.17
• 1.6.18

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion