PatchTheCVEipmitool vulnerabilities and fixes
Recent CVEs affecting ipmitool, with upgrade or downgrade steps. 1 tracked.
ipmitool has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-02-05. Highest priority: CVE-2020-5208 (score 54/100).
- CVE-2020-5208 HIGH 7.7 DOWNGRADE MITIGATE It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received
FAQ
How do I fix ipmitool vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ipmitool being exploited right now?
None of the tracked ipmitool CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ipmitool CVE should I patch first?
CVE-2020-5208 currently ranks highest (54/100): It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received.