579 matches found
EUVD-2026-70883
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...
UBUNTU-CVE-2026-85507
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell get-system-info...
UBUNTU-CVE-2026-85508
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell get-system-info...
PT-2026-85402
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem tool. This issue occurs within the output dell system info cmc ipv6 info function located in ipmi-oem/ipmi-oem-dell.c, specifically when using t...
UBUNTU-CVE-2026-85506
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in getdellsysteminfoidracinfo in ipmi-oem/ipmi-oem-dell.c idrac-info subcommand to dell get-system-info...
PT-2026-85401
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the output dell system info cmc info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when...
UBUNTU-CVE-2026-85505
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...
Linux Distros Unpatched Vulnerability : CVE-2026-85508
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to...
Linux Distros Unpatched Vulnerability : CVE-2026-85505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a...
test_avb_key
论 几乎 签名 Android 构建 引言 NCC Group 的顾问偶尔会遇到这样的问题：Android 构建使用了已知的私钥进行签名。这使设备制造商（以及他们的用户）暴露在风险之中，即使在启用了安全启动（secure boot）的设备上也是如此。这篇博文有两个目标： 提高对这一问题的认识 介绍一个脚本，用作快速检查，以验证 Android 构建是否（错误地）使用了已知私钥签名。 当基于 Android 的设备启动时，首先会验证引导加载程序（bootloader）运行的是已签名的代码，随后引导加载程序验证高级操作系统（HLOS）。这篇博文仅涉及后者。 保护引导加载程序 – 简要概述...
TencentOS Server 2: freeipmi (TSSA-2026:0936)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0936 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
CVE-2026-9031
An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web...
CVE-2026-9031
Summary: CVE-2026-9031 is an input validation vulnerability in the HTTP-WRITEOEM handler of the TP-Link Archer A6 web interface. The weakness stems from insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Impact (as documented): Successful ...
RHEL 8 : freeipmi (RHSA-2026:50729)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50729 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...
RHEL 8 : freeipmi (RHSA-2026:50772)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50772 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...
Moderate: Red Hat Security Advisory: freeipmi security update
An update for freeipmi is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
RHEL 7 : freeipmi (RHSA-2026:48826)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:48826 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...
USN-8613-1 FreeIPMI vulnerabilities
Zhihan Zheng discovered that FreeIPMI had several buffer overflow vulnerabilities in ipmi-oem response message handling. A local attacker with control a malicious IPMI device or simulator could possibly cause FreeIPMI to crash, resulting in a denial of service. CVE-2026-33554, CVE-2026-50031...
TencentOS Server 3: freeipmi (TSSA-2026:0636)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0636 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
