CVE-2012-4516
First published: Thu Oct 11 2012(Updated: )
librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openfabrics Librdmacm | =1.0.16 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.openfabrics.org/git?p=~shefty/librdmacm.git;a=commitdiff;h=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d
- http://www.openwall.com/lists/oss-security/2012/10/11/6
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=865510
- https://access.redhat.com/security/cve/CVE-2012-4516
- https://rhn.redhat.com/errata/RHSA-2013-1661.html
- https://bugzilla.redhat.com/show_bug.cgi?id=865483
- http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d
- http://www.openwall.com/lists/oss-security/2012/10/11/9
- http://www.securityfocus.com/bid/55896
- collector/redhat-bugzilla
- alias/CVE-2012-4516
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/openfabrics
- canonical/openfabrics librdmacm
- version/openfabrics librdmacm/1.0.16