CVE-2012-4516
First published: Thu Oct 11 2012(Updated: )
A security flaw was found in the way librdmacm, a userspace RDMA Communication Managment API allowing to specify connections using TCP/IP addresses even though it opens RDMA specific connections, performed binding to the underlying ib_acm service (librdmacm used default port value of 6125 to bind to ib_acm service). An attacker able to run a rogue ib_acm service could use this flaw to make librdmacm applications to use potentially bogus address resolution information. Upstream patch: [1] <a href="http://git.openfabrics.org/git?p=~shefty/librdmacm.git;a=commitdiff;h=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d">http://git.openfabrics.org/git?p=~shefty/librdmacm.git;a=commitdiff;h=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d</a> Acknowledgements: This issue was discovered by Florian Weimer of Red Hat Product Security Team.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openfabrics Librdmacm | =1.0.16 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.openfabrics.org/git?p=~shefty/librdmacm.git;a=commitdiff;h=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d
- http://www.openwall.com/lists/oss-security/2012/10/11/6
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=865510
- https://access.redhat.com/security/cve/CVE-2012-4516
- https://rhn.redhat.com/errata/RHSA-2013-1661.html
- https://bugzilla.redhat.com/show_bug.cgi?id=865483
- http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d
- http://www.openwall.com/lists/oss-security/2012/10/11/9
- http://www.securityfocus.com/bid/55896
- collector/redhat-bugzilla
- alias/CVE-2012-4516
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- vendor/openfabrics
- canonical/openfabrics librdmacm
- version/openfabrics librdmacm/1.0.16