OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ibutils | Jul 30, 2024 | Nov 23, 2013 |
| Oracle Solaris | — | Upgrade network/open-fabrics to version 1.5.3-0.175.1.16.0.4.0 on Solaris 11.1Upgrade network/open-fabrics to version 3.18-0.175.3.11.0.4.0 on Solaris 11.3 | May 29, 2017 | Nov 23, 2013 |
| Oracle_linux | — | Upgrade ibutils-libsUpgrade ibutilsUpgrade mpitests-openmpiUpgrade mpitests-mvapich2Upgrade mstflintUpgrade libibverbs-utilsUpgrade mpitests-mvapichUpgrade infinipath-psm-develUpgrade librdmacm-staticUpgrade openmpi-develUpgrade libmlx4Upgrade librdmacm-develUpgrade libmlx4-staticUpgrade infinipath-psmUpgrade mpitests-mvapich-psmUpgrade ibutils-develUpgrade qperfUpgrade openmpiUpgrade librdmacm-utilsUpgrade rdmaUpgrade libibverbsUpgrade libibverbs-devel-staticUpgrade mpitests-mvapich2-psmUpgrade librdmacmUpgrade perftestUpgrade libibverbs-devel | Oct 16, 2024 | Nov 23, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 6, 2013 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 23, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub