Ubuntu FreeIPMI Critical Buffer Overflow Denial of Service Advisory 8613-1

ubuntu

July 27, 2026

Ubuntu issued a security notice for FreeIPMI vulnerabilities affecting various LTS versions, detailing potential denial of service risks from buffer overflow issues and recommendin...

Summary

Several security issues were fixed in FreeIPMI.

Software Description:

- freeipmi: in-band and out-of-band Intelligent Platform Management Interface

Details:

Zhihan Zheng discovered that FreeIPMI had several buffer overflow

vulnerabilities in ipmi-oem response message handling. A local attacker

with control a malicious IPMI device or simulator could possibly cause

FreeIPMI to crash, resulting in a denial of service. (CVE-2026-33554,

CVE-2026-50031)

Topics Covered

security advisory denial of service buffer overflow critical Ubuntu freeipmi

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  freeipmi-tools                  1.6.16-1ubuntu0.1

Ubuntu 24.04 LTS
  freeipmi-tools                  1.6.13-3ubuntu0.1

Ubuntu 22.04 LTS
  freeipmi-tools                  1.6.9-2ubuntu0.22.04.3

Ubuntu 20.04 LTS
  freeipmi-tools                  1.6.4-3ubuntu1.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  freeipmi-tools                  1.4.11-1.1ubuntu4.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  freeipmi-tools                  1.4.11-1.1ubuntu4.1~0.16.04.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  freeipmi-tools                  1.1.5-3ubuntu3.3+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.