FreeIPMI versions before 1.6.19 contain a stack-based buffer overflow vulnerability in the function _ipmi_sel_oem_fujitsu_get_sel_entry_long_text located in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c. The vulnerability is triggered via malformed Fujitsu SEL long-text responses, which can cause memory corruption on the stack. This could potentially allow an attacker to execute arbitrary code or crash the affected application. The issue specifically affects systems using Fujitsu iRMC OEM SEL entries. A fix has been released in FreeIPMI version 1.6.19. Users are advised to update to the patched version immediately. The vulnerability was disclosed via the oss-security mailing list and the fix is available via the official GNU FTP server.
