Skip to content
OpenAdvisories
High RHSA-2020:1331 1 CVE

Red Hat Security Advisory: ipmitool security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client ipmitool 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::client ipmitool-debuginfo 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode ipmitool 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::computenode ipmitool-debuginfo 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server ipmitool 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::server ipmitool-debuginfo 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation ipmitool 0:1.8.15-3.el6_10
Red Hat · RHEL 6 enterprise_linux:6::workstation ipmitool-debuginfo 0:1.8.15-3.el6_10

Vulnerabilities 1

  • High 7.7
    CVE-2020-5208

    remote code execution vulnerability in ipmitool

    It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially danger…

    ipmitool ipmitool ipmitool ipmitool Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1798721
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1331.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-5208
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-5208
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-5208
  • article
    https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp