CVE-2026-50031

A flaw was found in FreeIPMI. Specifically, the ipmi-oem client command, which implements Intelligent Platform Management Interface (IPMI) OEM commands, contains exploitable buffer overflows. A remote attacker could exploit these vulnerabilities by sending specially crafted response messages to the ipmi-oem client, leading to a denial of service (DoS) condition and making the system unavailable.

This issue was classified as Moderate. It is an application level denial of service flaw in FreeIPMI's ipmi-oem client. A remote attacker can exploit buffer overflows by sending specially crafted response messages to the ipmi-oem client, leading to system unavailability. This vulnerability requires the ipmi-oem command to be actively used with specific OEM subcommands to communicate with a malicious or compromised Intelligent Platform Management Interface (IPMI) server.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.