Skip to content
OpenAdvisories
High ELSA-2020-0981 1 CVE

Important: ipmitool security update (Oracle Linux 8)

Published Mar 26, 2020 · Updated Mar 26, 2020

Summary

[1.8.18-12]
- Disable -fstrict-aliasing (RPMDiff issue)

[1.8.18-11]
- Backport fix for CVE-2020-5208

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 exchange-bmc-os-info 0:1.8.18-12.el8_1
Oracle Linux · 8 ipmievd 0:1.8.18-12.el8_1
Oracle Linux · 8 ipmitool 0:1.8.18-12.el8_1

Vulnerabilities 1

  • High 7.7

    remote code execution vulnerability in ipmitool

    It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially danger…