Critical severity9.8NVD Advisory· Published Sep 4, 2026· Updated Sep 8, 2026

CVE-2026-85508

Description

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords2 versions
pkg:rpm/opensuse/freeipmi&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/freeipmi&distro=openSUSE%20Leap%2016.0
< 1.6.19-1.1+ 1 more
- (no CPE)range: < 1.6.19-1.1
- (no CPE)range: < 1.6.15-160000.5.1
FreeIPMI/FreeIPMIllm-fuzzy
Range: <1.6.19

Patches

Vulnerability mechanics

References

ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gznvd
www.gnu.org/software/freeipmi/nvd
www.openwall.com/lists/oss-security/2026/08/28/5nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000