CVE-2020-5208 — Classic Buffer Overflow in Ipmitool

CWE-120 — Classic Buffer OverflowCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer10 documents7 sources
Severity
8.8HIGHNVD
EPSS
2.1%
top 15.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
IpmitoolIpmitool Project IpmitoolDebian Ipmitool+9 more
Timeline
PublishedFeb 5
Latest updateApr 4

Description

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages11 packages

▶debiandebian/ipmitool< ipmitool 1.8.18-10.1 (bookworm)
▶CVEListV5ipmitool/ipmitoolunspecified — < 1.8.19
▶Debianipmitool_project/ipmitool< 1.8.18-10.1+3

Also affects: Debian Linux 8.0, 9.0, Fedora 30, 31

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

1
OSV
CVE-2020-5208: It's been found that multiple functions in ipmitool before 1↗2020-02-05
▶

📋Vendor Advisories

4
Ubuntu
IPMItool vulnerability↗2023-04-04
▶
Microsoft
remote code execution vulnerability in ipmitool↗2020-02-11
▶
Red Hat
ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c↗2020-02-05
▶
Debian
CVE-2020-5208: ipmitool - It's been found that multiple functions in ipmitool before 1.8.19 neglect proper...↗2020
▶

💬Community

4
Bugzilla
CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c↗2020-02-06
▶
Bugzilla
CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c↗2020-02-06
▶
Bugzilla
CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c↗2020-02-05
▶
Bugzilla
CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c [fedora-all]↗2020-02-05
▶