Skip to content
OpenAdvisories
High ELSA-2020-0984 1 CVE

Important: ipmitool security update (Oracle Linux 7)

Published Mar 27, 2020 · Updated Mar 27, 2020

Summary

[0:1.8.18-9]
- Disable -fstrict-aliasing (RPMDiff issue)

[0:1.8.18-8]
- Backport fix for CVE-2020-5208

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 bmc-snmp-proxy 0:1.8.18-9.el7_7
Oracle Linux · 7 exchange-bmc-os-info 0:1.8.18-9.el7_7
Oracle Linux · 7 ipmitool 0:1.8.18-9.el7_7

Vulnerabilities 1

  • High 7.7

    remote code execution vulnerability in ipmitool

    It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially danger…