Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Mageia 8 MGASA-2023-0135 Critical: Ipmitool Buffer Overflow Threat

mageia
Calendar Grey April 11, 2023
Dist Mageia Esm H88
An important security patch for ipmitool in Mageia, issued on April 11, 2023, resolves a critical buffer overflow vulnerability.
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and poten...

Summary

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19. (CVE-2020-5208)

References

- https://bugs.mageia.org/show_bug.cgi?id=31759

- https://ubuntu.com/security/notices/USN-5997-1

- https://www.cve.org/CVERecord?id=CVE-2020-5208

Topics%20covered

Topics Covered

security advisory update buffer overflow remote execution critical threat ipmitool Mageia

Resolution

SRPMS

- 8/core/ipmitool-1.8.18-7.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 11 Apr 2023
URL: https://advisories.mageia.org/MGASA-2023-0135.html
Type: security
CVE: CVE-2020-5208

Topics%20covered

Topics Covered

security advisory update buffer overflow remote execution critical threat ipmitool Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here