CVE-2026-85508 Details
Description
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).
A stack-based buffer overflow vulnerability has been identified in FreeIPMI versions prior to 1.6.19. The issue resides in the ipmi-oem component, specifically within the Dell-specific command handling. The vulnerability is triggered by the cmc-ipv6-info subcommand of the dell get-system-info command.
Users can upgrade to FreeIPMI version 1.6.19 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2026CISA-ADP
Assessed Sep 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gz | [email protected] | Broken LinkSource CodeVendor |
| https://www.gnu.org/software/freeipmi/ | [email protected] | Vendor |
| https://www.openwall.com/lists/oss-security/2026/08/28/5 | [email protected] | Mailing ListRelease Notes |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| FreeIPMI | < 1.6.19 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 4, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2026 | New CVE Received | [email protected] |