Description
OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openipmi | 2.0.36-1 | — |
| Debian 13 | openipmi | 2.0.36-1 | — |
| Debian 12 | openipmi | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | openipmi | No fix yet | — |
| Ubuntu 24.04 LTS | openipmi | No fix yet | — |
| Ubuntu 22.04 LTS | openipmi | No fix yet | — |
| Ubuntu 20.04 LTS | openipmi | No fix yet | — |
| Ubuntu 18.04 LTS | openipmi | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | openipmi | No fix yet | — |
| Ubuntu 14.04 LTS | openipmi | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | OpenIPMI +3 | 2.0.32-5.el9_4 | RHSA-2024:8037 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | OpenIPMI +3 | 2.0.32-3.el9_2.3 | RHSA-2024:8081 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | OpenIPMI +3 | 2.0.32-5.el9_4 | ALSA-2024:8037 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | OpenIPMI | 2.0.32-5.el9_4 | RLSA-2024:8037 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | OpenIPMI | 2.0.31-150600.10.3.1 | SUSE-SU-2024:3505-1 |
| SLES 15 SP5 | OpenIPMI | 2.0.31-150400.3.5.1 | SUSE-SU-2024:3604-1 |
| SLES 12 SP5 | OpenIPMI | 2.0.21-10.9.1 | SUSE-SU-2024:3717-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | OpenIPMI | 2.0.21-10.9.1 | SUSE-SU-2024:3717-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | OpenIPMI | 2.0.36.4+git.c114912-1.1 | openSUSE-SU-2024:14373-1 |
| openSUSE Leap 15.6 | OpenIPMI | 2.0.31-150600.10.3.1 | SUSE-SU-2024:3505-1 |
| openSUSE Leap 15.5 | OpenIPMI | 2.0.31-150400.3.5.1 | SUSE-SU-2024:3604-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | OpenIPMI +5 | 2.0.23-2.amzn2.0.1 | ALAS2-2024-2651 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | OpenIPMI | 2.0.36-1 | — |
| Azure Linux 2 (CBL-Mariner) | OpenIPMI | 2.0.36-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | OpenIPMI +3 | 2.0.32-5.0.1.el9_4 | ELSA-2024-8037 |
Advisories 11
- ALSA-2024:8037 Moderate: OpenIPMI security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:8081 Red Hat Security Advisory: OpenIPMI security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:8037 Red Hat Security Advisory: OpenIPMI security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RLSA-2024:8037 Moderate: OpenIPMI security update Rocky Linux Security Advisories · Feb 5, 2026
- openSUSE-SU-2024:14373-1 OpenIPMI-2.0.36.4+git.c114912-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3604-1 Security update for OpenIPMI SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3505-1 Security update for OpenIPMI SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3717-1 Security update for OpenIPMI SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-3153 Red Hat Enterprise Linux (OpenIPMI): Schwachstelle ermöglicht Codeausführung, DoS oder Umgehung der Authentifizierung BSI CERT-Bund (WID) · Mar 16, 2025
- ALAS2-2024-2651 Moderate: OpenIPMI security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 15, 2024
- ELSA-2024-8037 Moderate: OpenIPMI security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Oct 14, 2024