librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade ibutils-libsUpgrade librdmacm-staticUpgrade ibutilsUpgrade libibverbs-utilsUpgrade infinipath-psmUpgrade perftestUpgrade libmlx4Upgrade libibverbs-develUpgrade openmpiUpgrade rdmaUpgrade mpitests-mvapichUpgrade libibverbs-devel-staticUpgrade librdmacm-develUpgrade mpitests-mvapich2-psmUpgrade mstflintUpgrade mpitests-mvapich-psmUpgrade librdmacmUpgrade libibverbsUpgrade infinipath-psm-develUpgrade mpitests-mvapich2Upgrade libmlx4-staticUpgrade ibutils-develUpgrade librdmacm-utilsUpgrade mpitests-openmpiUpgrade qperfUpgrade openmpi-devel | Oct 16, 2024 | Oct 22, 2012 |
| Ubuntu | — | Upgrade librdmacm | Nov 19, 2024 | Oct 22, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub