CVEvulnerability
CVE-2012-4516
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-10-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.
Affected configurations
• openfabrics librdmacm 1.0.16
References
- http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d git.openfabrics.org
- http://www.openwall.com/lists/oss-security/2012/10/11/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/10/11/9 www.openwall.com
- http://www.securityfocus.com/bid/55896 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=865483 bugzilla.redhat.com
- http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d git.openfabrics.org
- http://www.openwall.com/lists/oss-security/2012/10/11/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/10/11/9 www.openwall.com
- http://www.securityfocus.com/bid/55896 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=865483 bugzilla.redhat.com