Skip to content

CVE-2020-5208

remote code execution vulnerability in ipmitool

7.7 HighFix available

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

3.29%Down 0.3 points since Apr 14, 2021

What each source reports

CVE List Score used 7.7

remote code execution vulnerability in ipmitool

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: CVE-2020-5208
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Weakness: CWE-120
Updated: 2026-11-02

EUVDEUVD-2020-26448 7.7

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: EUVD-2020-26448
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated: 2026-11-03

NVD 7.7

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: CVE-2020-5208
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-120
Updated: 2026-11-02

OSVALPINE-CVE-2020-5208 8.8

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: ALPINE-CVE-2020-5208
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVAZL-6489 8.8

CVE-2020-5208 affecting package ipmitool for versions less than 1.8.18-21

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: AZL-6489
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 8.8

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: CVE-2020-5208
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 20 moreShow less

OSVDEBIAN-CVE-2020-5208 8.8

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: DEBIAN-CVE-2020-5208
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:0979 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:0979
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:0981 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:0981
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:0984 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:0984
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:1331 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:1331
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:1486 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:1486
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:2213 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:2213
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:2276 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:2276
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:2284 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:2284
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:2286 8.1

Red Hat Security Advisory: ipmitool security update

Record: RHSA-2020:2286
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2020-5208 7.7

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19.

Record: UBUNTU-CVE-2020-5208
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2020-0097 No score

Updated ipmitool packages fix security vulnerability

Updated ipmitool package fix security vulnerability:

Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side (CVE-2020-5208).

Record: MGASA-2020-0097
Updated: 2026-11-02

OSVMGASA-2023-0135 No score

Updated ipmitool packages fix security vulnerability

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged user. This problem is fixed in version 1.8.19. (CVE-2020-5208)

Record: MGASA-2023-0135
Updated: 2026-11-02

OSVopenSUSE-SU-2020:0247-1 No score

Security update for ipmitool

This update for ipmitool fixes the following security issue:

CVE-2020-5208: Fixed several buffer overflows (bsc#1163026).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record: openSUSE-SU-2020:0247-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10864-1 No score

ipmitool-1.8.18.238.gb7adc1d-1.2 on GA media

These are all security issues fixed in the ipmitool-1.8.18.238.gb7adc1d-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10864-1
Updated: 2026-11-02

OSVSUSE-SU-2020:0405-1 No score

Security update for ipmitool

This update for ipmitool fixes the following security issue:

CVE-2020-5208: Fixed several buffer overflows (bsc#1163026).

Record: SUSE-SU-2020:0405-1
Updated: 2026-11-02

OSVSUSE-SU-2020:0617-1 No score

Security update for ipmitool

This update for ipmitool fixes the following issues:

CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities (bsc#1163026).
picmg discover messages are now DEBUG and not INFO messages (bsc#1085469).

Record: SUSE-SU-2020:0617-1
Updated: 2026-11-02

OSVSUSE-SU-2020:0630-1 No score

Security update for ipmitool

This update for ipmitool fixes the following issues:

CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities (bsc#1163026).
picmg discover messages are now DEBUG and not INFO messages (bsc#1085469).

Record: SUSE-SU-2020:0630-1
Updated: 2026-11-02

OSVSUSE-SU-2020:14313-1 No score

Security update for ipmitool

This update for ipmitool fixes the following issues:

CVE-2020-5208: Fixed several buffer overflows (bsc#1163026).
Added a missing patch for DDR4 support (bsc#1038508).

Record: SUSE-SU-2020:14313-1
Updated: 2026-11-02

OSVUSN-5997-1 No score

ipmitool vulnerability

It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution.

Record: USN-5997-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`ipmitool` Alpine:v3.11	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.12	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.13	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.14	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.15	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.16	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.17	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.18	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.19	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.20	before 1.8.18-r9	1.8.18-r9

Show 116 moreShow less

Affected packages
Package	Affected	Fixed
`ipmitool` Alpine:v3.21	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.22	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.23	before 1.8.18-r9	1.8.18-r9
`ipmitool` Alpine:v3.24	before 1.8.18-r9	1.8.18-r9
`ipmitool` Azure Linux:2	before 1.8.18-21	1.8.18-21
`ipmitool` Debian:12	before 1.8.18-10.1	1.8.18-10.1
`ipmitool` Debian:13	before 1.8.18-10.1	1.8.18-10.1
`ipmitool` Debian:14	before 1.8.18-10.1	1.8.18-10.1
`ipmitool` Debian:8	before 1.8.14-4+deb8u1, plus listed versions 1.8.14-4	1.8.14-4+deb8u1
`ipmitool` Debian:9	before 1.8.18-3+deb9u1, plus listed versions 1.8.18-3	1.8.18-3+deb9u1
`ipmitool` Mageia:7	before 1.8.18-3.1.mga7	1.8.18-3.1.mga7
`ipmitool` Mageia:8	before 1.8.18-7.1.mga8	1.8.18-7.1.mga8
`exchange-bmc-os-info` Red Hat:rhel_e4s:8.0::appstream	before 0:1.8.18-12.el8_0	0:1.8.18-12.el8_0
`ipmievd` Red Hat:rhel_e4s:8.0::appstream	before 0:1.8.18-12.el8_0	0:1.8.18-12.el8_0
`ipmievd-debuginfo` Red Hat:rhel_e4s:8.0::appstream	before 0:1.8.18-12.el8_0	0:1.8.18-12.el8_0
`ipmitool` Red Hat:rhel_e4s:8.0::appstream	before 0:1.8.18-12.el8_0	0:1.8.18-12.el8_0
`ipmitool-debuginfo` Red Hat:rhel_e4s:8.0::appstream	before 0:1.8.18-12.el8_0	0:1.8.18-12.el8_0
`ipmitool-debugsource` Red Hat:rhel_e4s:8.0::appstream	before 0:1.8.18-12.el8_0	0:1.8.18-12.el8_0
`exchange-bmc-os-info` Red Hat:enterprise_linux:8::appstream	before 0:1.8.18-12.el8_1	0:1.8.18-12.el8_1
`ipmievd` Red Hat:enterprise_linux:8::appstream	before 0:1.8.18-12.el8_1	0:1.8.18-12.el8_1
`ipmievd-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:1.8.18-12.el8_1	0:1.8.18-12.el8_1
`ipmitool` Red Hat:enterprise_linux:8::appstream	before 0:1.8.18-12.el8_1	0:1.8.18-12.el8_1
`ipmitool-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:1.8.18-12.el8_1	0:1.8.18-12.el8_1
`ipmitool-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:1.8.18-12.el8_1	0:1.8.18-12.el8_1
`ipmitool` Red Hat:enterprise_linux:7::computenode	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`ipmitool-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`bmc-snmp-proxy` Red Hat:enterprise_linux:7::computenode	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`exchange-bmc-os-info` Red Hat:enterprise_linux:7::computenode	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`ipmitool` Red Hat:enterprise_linux:7::server	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`ipmitool-debuginfo` Red Hat:enterprise_linux:7::server	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`bmc-snmp-proxy` Red Hat:enterprise_linux:7::server	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`exchange-bmc-os-info` Red Hat:enterprise_linux:7::server	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`ipmitool` Red Hat:enterprise_linux:7::workstation	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`ipmitool-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`bmc-snmp-proxy` Red Hat:enterprise_linux:7::workstation	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`exchange-bmc-os-info` Red Hat:enterprise_linux:7::workstation	before 0:1.8.18-9.el7_7	0:1.8.18-9.el7_7
`ipmitool` Red Hat:enterprise_linux:6::client	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool` Red Hat:enterprise_linux:6::computenode	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool` Red Hat:enterprise_linux:6::server	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool` Red Hat:enterprise_linux:6::workstation	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.8.15-3.el6_10	0:1.8.15-3.el6_10
`ipmitool` Red Hat:rhel_eus:7.5::computenode	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`ipmitool-debuginfo` Red Hat:rhel_eus:7.5::computenode	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`bmc-snmp-proxy` Red Hat:rhel_eus:7.5::computenode	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`exchange-bmc-os-info` Red Hat:rhel_eus:7.5::computenode	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`ipmitool` Red Hat:rhel_eus:7.5::server	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`ipmitool-debuginfo` Red Hat:rhel_eus:7.5::server	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`bmc-snmp-proxy` Red Hat:rhel_eus:7.5::server	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`exchange-bmc-os-info` Red Hat:rhel_eus:7.5::server	before 0:1.8.18-9.el7_5	0:1.8.18-9.el7_5
`ipmitool` Red Hat:rhel_aus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`ipmitool-debuginfo` Red Hat:rhel_aus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`ipmitool` Red Hat:rhel_e4s:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`ipmitool-debuginfo` Red Hat:rhel_e4s:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`ipmitool` Red Hat:rhel_tus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`ipmitool-debuginfo` Red Hat:rhel_tus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`bmc-snmp-proxy` Red Hat:rhel_aus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`exchange-bmc-os-info` Red Hat:rhel_aus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`bmc-snmp-proxy` Red Hat:rhel_e4s:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`exchange-bmc-os-info` Red Hat:rhel_e4s:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`bmc-snmp-proxy` Red Hat:rhel_tus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`exchange-bmc-os-info` Red Hat:rhel_tus:7.4::server	before 0:1.8.18-6.el7_4	0:1.8.18-6.el7_4
`ipmitool` Red Hat:rhel_aus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`ipmitool-debuginfo` Red Hat:rhel_aus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`ipmitool` Red Hat:rhel_e4s:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`ipmitool-debuginfo` Red Hat:rhel_e4s:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`ipmitool` Red Hat:rhel_tus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`ipmitool-debuginfo` Red Hat:rhel_tus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`bmc-snmp-proxy` Red Hat:rhel_aus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`exchange-bmc-os-info` Red Hat:rhel_aus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`bmc-snmp-proxy` Red Hat:rhel_e4s:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`exchange-bmc-os-info` Red Hat:rhel_e4s:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`bmc-snmp-proxy` Red Hat:rhel_tus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`exchange-bmc-os-info` Red Hat:rhel_tus:7.3::server	before 0:1.8.15-8.el7_3	0:1.8.15-8.el7_3
`ipmitool` Red Hat:rhel_aus:7.2::server	before 0:1.8.13-10.el7_2	0:1.8.13-10.el7_2
`ipmitool-debuginfo` Red Hat:rhel_aus:7.2::server	before 0:1.8.13-10.el7_2	0:1.8.13-10.el7_2
`bmc-snmp-proxy` Red Hat:rhel_aus:7.2::server	before 0:1.8.13-10.el7_2	0:1.8.13-10.el7_2
`exchange-bmc-os-info` Red Hat:rhel_aus:7.2::server	before 0:1.8.13-10.el7_2	0:1.8.13-10.el7_2
`ipmitool` Red Hat:rhel_eus:7.6::computenode	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`ipmitool-debuginfo` Red Hat:rhel_eus:7.6::computenode	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`bmc-snmp-proxy` Red Hat:rhel_eus:7.6::computenode	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`exchange-bmc-os-info` Red Hat:rhel_eus:7.6::computenode	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`ipmitool` Red Hat:rhel_eus:7.6::server	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`ipmitool-debuginfo` Red Hat:rhel_eus:7.6::server	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`bmc-snmp-proxy` Red Hat:rhel_eus:7.6::server	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`exchange-bmc-os-info` Red Hat:rhel_eus:7.6::server	before 0:1.8.18-9.el7_6	0:1.8.18-9.el7_6
`ipmitool` SUSE:Linux Enterprise Module for Basesystem 15 SP1	before 1.8.18-7.3.1	1.8.18-7.3.1
`ipmitool` SUSE:Linux Enterprise Module for Server Applications 15 SP1	before 1.8.18-7.3.1	1.8.18-7.3.1
`ipmitool` SUSE:Linux Enterprise High Performance Computing 15-ESPOS	before 1.8.18-4.3.1	1.8.18-4.3.1
`ipmitool` SUSE:Linux Enterprise High Performance Computing 15-LTSS	before 1.8.18-4.3.1	1.8.18-4.3.1
`ipmitool` SUSE:Linux Enterprise Server 15-LTSS	before 1.8.18-4.3.1	1.8.18-4.3.1
`ipmitool` SUSE:Linux Enterprise Server for SAP Applications 15	before 1.8.18-4.3.1	1.8.18-4.3.1
`ipmitool` SUSE:HPE Helion OpenStack 8	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:OpenStack Cloud 8	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:OpenStack Cloud Crowbar 8	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Desktop 12 SP4	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server 12 SP3-LTSS	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server 12 SP3-BCL	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server 12 SP4	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server 12 SP5	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Enterprise Storage 5	before 1.8.18-5.9.1	1.8.18-5.9.1
`ipmitool` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 1.8.15-0.30.3.1	1.8.15-0.30.3.1
`ipmitool` Ubuntu:Pro:16.04:LTS	before 1.8.16-3ubuntu0.2+esm1, plus listed versions 1.8.15-1ubuntu11.8.15-1ubuntu21.8.15-1ubuntu31.8.16-2ubuntu21.8.16-31.8.16-3ubuntu0.11.8.16-3ubuntu0.2	1.8.16-3ubuntu0.2+esm1
`ipmitool` Ubuntu:18.04:LTS	before 1.8.18-5ubuntu0.2, plus listed versions 1.8.18-41.8.18-51.8.18-5build11.8.18-5ubuntu0.1	1.8.18-5ubuntu0.2
`ipmitool` Ubuntu:20.04:LTS	before 1.8.18-8ubuntu0.1, plus listed versions 1.8.18-7ubuntu21.8.18-8	1.8.18-8ubuntu0.1
`ipmitool` Ubuntu:24.04:LTS	All versions, plus listed versions 1.8.19-61.8.19-71.8.19-7build11.8.19-7build21.8.19-7ubuntu0.24.04.11.8.19-7ubuntu0.24.04.21.8.19-7ubuntu0.24.04.3	None known
`ipmitool` Ubuntu:25.10	All versions, plus listed versions 1.8.19-7.11.8.19-7.1ubuntu11.8.19-7.1ubuntu21.8.19-9ubuntu11.8.19-9ubuntu2	None known
`ipmitool` Ubuntu:26.10	All versions, plus listed versions 1.8.19-10ubuntu11.8.19-10ubuntu2	None known
`ipmitool` Ubuntu:26.04:LTS	All versions, plus listed versions 1.8.19-9ubuntu21.8.19-9ubuntu31.8.19-10ubuntu1	None known
`ipmitool` openSUSE:Leap 15.1	before 1.8.18-lp151.4.3.1	1.8.18-lp151.4.3.1
`ipmitool` openSUSE:Tumbleweed	before 1.8.18.238.gb7adc1d-1.2	1.8.18.238.gb7adc1d-1.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-5208 is a high vulnerability (CVSS 7.7) in Ipmitool, published February 5, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.29%, the 88th percentile. Fixed in ipmitool 1.8.18-r9.

References

Show 43 moreShow less