Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-0984

Опубликовано: 27 мар. 2020
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2020-0984: ipmitool security update (IMPORTANT)

[0:1.8.18-9]

  • Disable -fstrict-aliasing (RPMDiff issue)

[0:1.8.18-8]

  • Backport fix for CVE-2020-5208

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

bmc-snmp-proxy

1.8.18-9.el7_7

exchange-bmc-os-info

1.8.18-9.el7_7

ipmitool

1.8.18-9.el7_7

Oracle Linux x86_64

bmc-snmp-proxy

1.8.18-9.el7_7

exchange-bmc-os-info

1.8.18-9.el7_7

ipmitool

1.8.18-9.el7_7

Связанные CVE

Связанные уязвимости

CVSS3: 7.7
ubuntu
около 6 лет назад

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

CVSS3: 8.1
redhat
около 6 лет назад

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

CVSS3: 7.7
nvd
около 6 лет назад

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

CVSS3: 8.8
msrc
больше 5 лет назад

remote code execution vulnerability in ipmitool

CVSS3: 7.7
debian
около 6 лет назад

It's been found that multiple functions in ipmitool before 1.8.19 negl ...