Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.
| Software | From | Fixed in |
|---|---|---|
| dell / idrac7_firmware | - | 2.65.65.65 |
| dell / idrac8_firmware | - | 2.70.70.70 |
| dell / idrac9_firmware | - | 4.00.00.00 |