librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade mpitests-mvapich2Upgrade mpitests-mvapich2-psmUpgrade mpitests-openmpiUpgrade librdmacm-utilsUpgrade librdmacm-develUpgrade mstflintUpgrade libibverbs-devel-staticUpgrade ibutils-develUpgrade mpitests-mvapichUpgrade libmlx4-staticUpgrade openmpi-develUpgrade libibverbsUpgrade librdmacmUpgrade mpitests-mvapich-psmUpgrade qperfUpgrade infinipath-psm-develUpgrade infinipath-psmUpgrade libibverbs-utilsUpgrade ibutils-libsUpgrade ibutilsUpgrade openmpiUpgrade libibverbs-develUpgrade rdmaUpgrade perftestUpgrade libmlx4Upgrade librdmacm-static | Oct 16, 2024 | Oct 22, 2012 |
| Ubuntu | — | Upgrade librdmacm | Nov 19, 2024 | Oct 22, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub