Description
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
Published: 2026-09-04
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

FreeIPMI before version 1.6.19 contains a stack‑based buffer overflow in the function _ipmi_sel_oem_fujitsu_get_sel_entry_long_text. The overflow is triggered by malformed Fujitsu SEL long‑text responses, allowing an attacker to corrupt the stack and execute arbitrary code. This classic stack‑based buffer overflow vulnerability (CWE‑121) can compromise confidentiality, integrity, and availability of the system where FreeIPMI runs.

Affected Systems

The affected product is FreeIPMI, FreeIPMI. All versions prior to 1.6.19 are vulnerable.

Risk and Exploitability

With a CVSS score of 9.8 the risk is high and the likelihood of exploitation is significant, although the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw by sending crafted IPMI SEL long‑text packets over the network to a system that has FreeIPMI running, potentially without requiring local privileges if IPMI is exposed. Failure to patch may allow remote code execution on exposed hosts.

Generated by OpenCVE AI on September 4, 2026 at 06:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade FreeIPMI to version 1.6.19 or later to fix the buffer overflow.
  • Disable or restrict IPMI SEL access on affected hosts until a patch is applied.
  • Monitor IPMI traffic and block suspicious SEL long‑text packets from untrusted sources.

Generated by OpenCVE AI on September 4, 2026 at 06:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 05 Sep 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
Title Stack‑Based Buffer Overflow in FreeIPMI via Malformed Fujitsu SEL Long‑Text Responses FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses
References
Metrics threat_severity

None

 threat_severity

Important

Fri, 04 Sep 2026 06:45:00 +0000

Type Values Removed Values Added
Title Stack‑Based Buffer Overflow in FreeIPMI via Malformed Fujitsu SEL Long‑Text Responses

Fri, 04 Sep 2026 06:15:00 +0000

Type Values Removed Values Added
First Time appeared Freeipmi
Freeipmi freeipmi
Vendors & Products Freeipmi
Freeipmi freeipmi

Fri, 04 Sep 2026 04:30:00 +0000

Type Values Removed Values Added
Description FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Freeipmi Freeipmi
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-04T19:22:11.217Z

Reserved: 2026-09-04T04:14:30.494Z

Link: CVE-2026-85504

cve-icon Vulnrichment

Updated: 2026-09-04T19:22:06.770Z

cve-icon NVD

Status : Deferred

Published: 2026-09-04T05:17:16.047

Modified: 2026-09-08T19:42:20.313

Link: CVE-2026-85504

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-04T04:14:30Z

Links: CVE-2026-85504 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T06:30:14Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow