Buffer Overflow Vulnerability in FreeIPMI's IPMI OEM Client Command

CVE-2026-50031

What is CVE-2026-50031?

The FreeIPMI tool, specifically the ipmi-oem client command, contains exploitable buffer overflows affecting response messages for certain OEM commands. This vulnerability can impact users operating supported hardware who execute commands such as 'ipmi-oem dell get-active-directory-config' and 'ipmi-oem fujitsu get-sel-entry-long-text'. These commands are designed to retrieve crucial system management data, and the buffer overflow can potentially allow an attacker to manipulate the execution flow of the application, leading to unauthorized actions or data breaches.

References