Veracode Vulnerability DatabaseVERACODE:25460Privilege Escalation
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
ipmitool is vulnerable to privilege escalation. The vulnerability exists through buffer overflow in read_fru_area_section function in lib/ipmi_fru.c.
References
lists.opensuse.org/opensuse-security-announce/2020-02/msg00031.html
access.redhat.com/errata/RHSA-2020:2213
access.redhat.com/security/updates/classification/#important
github.com/ipmitool/ipmitool/commit/e824c23316ae50beb7f7488f2055ac65e8b341f2
github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
lists.debian.org/debian-lts-announce/2020/02/msg00006.html
lists.debian.org/debian-lts-announce/2021/06/msg00029.html
lists.fedoraproject.org/archives/list/[email protected]/message/K2BPW66KDP4H36AGZXLED57A3O2Y6EQW/
lists.fedoraproject.org/archives/list/[email protected]/message/RYYEKUAUTCWICM77HOEGZDVVEUJLP4BP/
security.gentoo.org/glsa/202101-03
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P