A critical stack-based buffer overflow in FreeIPMI allows unauthenticated remote attackers to potentially achieve arbitrary code execution or cause system crashes.

This is a stack-based buffer overflow (CWE-121) occurring in the _read_fru_data function. The vulnerability is exploitable by an unauthenticated remote attacker when the BMC returns more data than the software requests.

The CVSS score of 9.8 reflects the critical nature of this flaw, as it allows for full system compromise without requiring user interaction or authentication. Successful exploitation can lead to complete loss of confidentiality, integrity, and availability of the affected server management interface, potentially granting an attacker persistent control over the host hardware.

Immediate Action: Update the FreeIPMI software to version 1.6.19 or later, which contains the necessary fix for the buffer overflow.

Proactive Monitoring: Monitor network traffic for anomalous IPMI packets or unexpected responses from BMC interfaces that could indicate an exploitation attempt.

Compensating Controls: Restrict network access to BMC interfaces via firewalls or VLAN segmentation to ensure only authorized management segments can communicate with the service.

Public Exploit Available: Unknown

Given the critical severity and the potential for remote code execution, organizations should prioritize patching FreeIPMI immediately. System administrators must ensure that all instances of the library are updated to version 1.6.19 to prevent unauthorized access and protect the integrity of the server management infrastructure.