Skip to content
OpenAdvisories
High USN-5997-1 1 CVE

ipmitool vulnerability

Published Apr 4, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that IPMItool was not properly checking the data received
from a remote LAN party. A remote attacker could possibly use this issue to
to cause a crash or arbitrary code execution.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS ipmitool 1.8.18-5ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS ipmitool 1.8.18-8ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS ipmitool 1.8.16-3ubuntu0.2+esm1

Vulnerabilities 1

  • High 7.7
    CVE-2020-5208

    remote code execution vulnerability in ipmitool

    It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially danger…

    ipmitool ipmitool ipmitool ipmitool Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2020-5208