ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade opensm-staticUpgrade libibverbs-devel-staticUpgrade ibacmUpgrade rdmaUpgrade libibmadUpgrade librdmacm-utilsUpgrade ibsimUpgrade librdmacmUpgrade libibmad-develUpgrade librdmacm-develUpgrade libibverbs-utilsUpgrade ibutils-develUpgrade opensmUpgrade infiniband-diagsUpgrade libibumadUpgrade libmlx4Upgrade libibverbsUpgrade ibutils-libsUpgrade libibumad-staticUpgrade infiniband-diags-develUpgrade libmlx4-staticUpgrade opensm-libsUpgrade ibacm-develUpgrade ibutilsUpgrade opensm-develUpgrade libibmad-staticUpgrade libibumad-develUpgrade infiniband-diags-devel-staticUpgrade librdmacm-staticUpgrade libibverbs-devel | Dec 1, 2016 | Oct 22, 2012 |
| Oracle_linux | — | Upgrade infiniband-diagsUpgrade librdmacm-utilsUpgrade libibumad-develUpgrade opensm-develUpgrade libibumad-staticUpgrade ibutilsUpgrade libibverbs-utilsUpgrade ibacm-develUpgrade libibmadUpgrade ibsimUpgrade ibacmUpgrade libibverbsUpgrade opensmUpgrade libmlx4-staticUpgrade infiniband-diags-devel-staticUpgrade libibverbs-develUpgrade opensm-staticUpgrade libibmad-develUpgrade librdmacm-develUpgrade infinipath-psm-develUpgrade libibumadUpgrade librdmacmUpgrade ibutils-develUpgrade librdmacm-staticUpgrade infinipath-psmUpgrade libmlx4Upgrade libibverbs-devel-staticUpgrade opensm-libsUpgrade rdmaUpgrade infiniband-diags-develUpgrade libibmad-staticUpgrade ibutils-libs | Oct 16, 2024 | Oct 22, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub