ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ibacm-develUpgrade librdmacm-staticUpgrade libibumadUpgrade opensm-develUpgrade opensm-staticUpgrade libmlx4-staticUpgrade ibacmUpgrade ibutilsUpgrade opensm-libsUpgrade infiniband-diags-develUpgrade libibverbsUpgrade libibverbs-devel-staticUpgrade libmlx4Upgrade infiniband-diagsUpgrade ibutils-libsUpgrade ibsimUpgrade libibmadUpgrade libibverbs-utilsUpgrade libibumad-staticUpgrade infiniband-diags-devel-staticUpgrade libibmad-develUpgrade librdmacmUpgrade ibutils-develUpgrade librdmacm-develUpgrade libibverbs-develUpgrade libibumad-develUpgrade libibmad-staticUpgrade rdmaUpgrade opensmUpgrade librdmacm-utils | Dec 1, 2016 | Oct 22, 2012 |
| Oracle_linux | — | Upgrade ibutilsUpgrade infiniband-diagsUpgrade libibmadUpgrade librdmacm-utilsUpgrade libmlx4-staticUpgrade opensm-develUpgrade libmlx4Upgrade libibumad-develUpgrade ibsimUpgrade infiniband-diags-devel-staticUpgrade libibverbsUpgrade opensmUpgrade ibacmUpgrade libibumad-staticUpgrade libibverbs-develUpgrade opensm-staticUpgrade libibmad-develUpgrade libibverbs-devel-staticUpgrade libibumadUpgrade libibmad-staticUpgrade infiniband-diags-develUpgrade librdmacm-staticUpgrade ibutils-libsUpgrade libibverbs-utilsUpgrade ibutils-develUpgrade infinipath-psmUpgrade librdmacmUpgrade ibacm-develUpgrade rdmaUpgrade librdmacm-develUpgrade opensm-libsUpgrade infinipath-psm-devel | Oct 16, 2024 | Oct 22, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub