CVE-2020-5208

A flaw was found in several functions of the IPMItool, where it failed to check data received from a LAN properly. An attacker could use this flaw to craft payloads, which can lead to a buffer overflow and also cause memory corruption, a denial of service, and remote code execution.

Mitigation

There's no mitigation available for this issue, although a few actions help to reduce the attack risk:

1. Avoid to run ipmitool as privileged user;
2. Avoid to run ipmitool against non-trusted IPMI-enabled devices;