REDHAT-BUG-865492: Low severity OpenFabrics ibacm vulnerability

Published Oct 11, 2012

Updated

A denial of service flaw was found in the way ibacm, an InfiniBand communication manager assistant, performed management of reference counts for multicast connections. The default reference count value for multicast connection is set to zero and when the multicast connection got released, an attempt was made to free it, possibly resulting in ibacm service / daemon crash.

Upstream patch: [1] http://git.openfabrics.org/git?p=~shefty/ibacm.git;a=commit;h=c7d28b35d64333c262de3ec972c426423dadccf9

Affected Software

1 affected component

OpenFabrics ibacm

Event History

Oct 11, 2012

Data Sourced

03:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-865492?

The severity of REDHAT-BUG-865492 is classified as a denial of service vulnerability.

How do I fix REDHAT-BUG-865492?

To fix REDHAT-BUG-865492, update the ibacm package to the latest version that addresses this vulnerability.

What software is affected by REDHAT-BUG-865492?

REDHAT-BUG-865492 affects the OpenFabrics ibacm software.

What type of vulnerability is REDHAT-BUG-865492?

REDHAT-BUG-865492 is a denial of service vulnerability related to multicast connection management.

Is there a patch available for REDHAT-BUG-865492?

Yes, a patch is available that resolves the denial of service issue in REDHAT-BUG-865492.