Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
remote code execution vulnerability in ipmitool
Vulnerability Description
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Vulnerability Title
ipmitool 缓冲区错误漏洞
Vulnerability Description
ipmitool 1.8.19之前版本中多个功能存在缓冲区错误漏洞，该漏洞源于程序没有正确检查边界。远程攻击者可借助特制数据利用该漏洞在ipmitool端执行代码。
CVSS Information
N/A
Vulnerability Type
N/A