Vulners
Lucene search
Gentoo Linux Security Advisory 202101-03
| Reporter | Title | Published | Views | Family All 158 |
|---|---|---|---|---|
 | Security fix for the ALT Linux 9 package ipmitool version 1.8.18-alt4 | 3 Jun 202100:00 | – | altlinux |
 | Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities | 9 Apr 202103:15 | – | ibm |
| Security Bulletin: IBM MQ Appliance is affected by a buffer overflow vulnerability (CVE-2020-5208) | 27 Jul 202009:20 | – | ibm |
 | Amazon Linux 2 : ipmitool (ALAS-2020-1420) | 7 May 202000:00 | – | nessus |
| Alibaba Cloud Linux 3 : 0046: ipmitool (ALINUX3-SA-2022:0046) | 14 May 202500:00 | – | nessus |
| CentOS 8 : ipmitool (CESA-2020:0981) | 1 Feb 202100:00 | – | nessus |
| CentOS 7 : ipmitool (RHSA-2020:0984) | 22 May 202000:00 | – | nessus |
| CentOS 6 : ipmitool (RHSA-2020:1331) | 10 Apr 202000:00 | – | nessus |
| Debian DLA-2098-1 : ipmitool security update | 10 Feb 202000:00 | – | nessus |
| Debian DLA-2699-1 : ipmitool - LTS security update | 1 Jul 202100:00 | – | nessus |
10
`- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 202101-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: ipmitool: Multiple vulnerabilities
Date: January 10, 2021
Bugs: #708436
ID: 202101-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
A buffer overflow in ipmitool might allow remote attacker(s) to execute
arbitrary code.
Background
==========
Utility for controlling IPMI enabled devices.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 sys-apps/ipmitool < 1.8.18_p20201004-r1>= 1.8.18_p20201004-r1
Description
===========
Multiple vulnerabilities have been discovered in ipmiool. Please review
the CVE identifiers referenced below for details.
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process or cause a Denial of Service condition.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All ipmitool users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=sys-apps/ipmitool-1.8.18_p20201004-r1"
References
==========
[ 1 ] CVE-2020-5208
https://nvd.nist.gov/vuln/detail/CVE-2020-5208
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/202101-03
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
[email protected] or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2021 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
https://creativecommons.org/licenses/by-sa/2.5
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Jan 2021 00:00Current
0.4Low risk
Vulners AI Score0.4
EPSS0.01945