PT-2026-27437 · Freeipmi+4 · Freeipmi+4

Zhihan Zheng · Published 2026-01-01 · Updated 2026-05-26 · CVE-2026-33554

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.16.17

Description The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management and is implemented by numerous hardware manufacturers to support system management. It is commonly used for sensor reading and remote power control. The ipmi-oem client command implements IPMI OEM commands for specific hardware vendors. Three subcommands were found to have exploitable buffer overflows in response messages: 'ipmi-oem dell get-last-post-code' for retrieving the last POST code and error description on some Dell servers, 'ipmi-oem supermicro extra-firmware-info' for obtaining extra firmware information on Supermicro servers, and 'ipmi-oem wistron read-proprietary-string' for reading a proprietary string on Wistron servers.

Recommendations Versions prior to 1.16.17 should be updated to version 1.16.17 or later.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

ALSA-2026:13515

ALSA-2026:14819

ALSA-2026:19053

ALSA-2026:19208

ALSA-2026:20579

CVE-2026-33554

MGASA-2026-0078

OESA-2026-1737

OESA-2026-1738

OESA-2026-1739

OESA-2026-1740

OESA-2026-1741

OPENSUSE-SU-2026:10436-1

OPENSUSE-SU-2026:20556-1

RHSA-2026:13515

RHSA-2026:14819

RHSA-2026:19053

RHSA-2026:19208

SUSE-SU-2026:21212-1

SUSE-SU-2026:21231-1

Affected Products

Dell Servers

Freeipmi

Rocky Linux

Supermicro Servers

Wistron Servers

References · 57

• https://errata.rockylinux.org/RLSA-2026:19208 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-20579.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1740 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1741 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1737 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-20579.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-33554 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:14819 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:19053 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-14819.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-33554 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-13515.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1738 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-19053.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21231-1 · Vendor Advisory