ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade opensm-develUpgrade libibumadUpgrade ibacmUpgrade librdmacm-staticUpgrade ibutilsUpgrade ibacm-develUpgrade libmlx4-staticUpgrade opensm-staticUpgrade infiniband-diagsUpgrade libibmad-staticUpgrade infiniband-diags-develUpgrade libibverbsUpgrade opensmUpgrade librdmacm-utilsUpgrade ibsimUpgrade librdmacmUpgrade libibumad-staticUpgrade ibutils-libsUpgrade libmlx4Upgrade rdmaUpgrade libibmadUpgrade infiniband-diags-devel-staticUpgrade ibutils-develUpgrade libibverbs-utilsUpgrade librdmacm-develUpgrade libibmad-develUpgrade libibverbs-develUpgrade libibumad-develUpgrade opensm-libsUpgrade libibverbs-devel-static | Dec 1, 2016 | Oct 22, 2012 |
| Oracle_linux | — | Upgrade librdmacmUpgrade librdmacm-staticUpgrade libibmad-staticUpgrade ibacm-develUpgrade libibverbs-devel-staticUpgrade infiniband-diags-develUpgrade ibutils-develUpgrade rdmaUpgrade libibverbs-utilsUpgrade libibmad-develUpgrade infinipath-psm-develUpgrade infinipath-psmUpgrade opensm-staticUpgrade ibsimUpgrade libibumadUpgrade opensmUpgrade opensm-libsUpgrade ibacmUpgrade ibutilsUpgrade libibumad-develUpgrade librdmacm-develUpgrade libmlx4Upgrade librdmacm-utilsUpgrade libibverbsUpgrade infiniband-diags-devel-staticUpgrade libmlx4-staticUpgrade libibmadUpgrade ibutils-libsUpgrade libibverbs-develUpgrade libibumad-staticUpgrade infiniband-diagsUpgrade opensm-devel | Oct 16, 2024 | Oct 22, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub