CVE-2012-4516

CVE Details

Release Date:2012-10-08
Impact:None What is this?

Description


librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.

See more information about CVE-2012-4516 from MITRE CVE dictionary and NIST NVD


NOTE: The following CVSS metrics and score provided are preliminary and subject to review.


CVSS v2 metrics

Base Score: 1.2
Vector String: AV:L/AC:H/Au:N/C:P/I:N/A:N
Version: 2.0
Attack Vector: Local
Attack Complexity: High
Authentication: None
Confidentiality Impact: Partial
Integrity Impact: None
Availability Impact: None

Errata information


PlatformErrataRelease Date
Oracle Linux version 6 (ibutils)ELSA-2013-16612013-11-25
Oracle Linux version 6 (infinipath-psm)ELSA-2013-16612013-11-25
Oracle Linux version 6 (libibverbs)ELSA-2013-16612013-11-25
Oracle Linux version 6 (libmlx4)ELSA-2013-16612013-11-25
Oracle Linux version 6 (librdmacm)ELSA-2013-16612013-11-25
Oracle Linux version 6 (mpitests)ELSA-2013-16612013-11-25
Oracle Linux version 6 (mstflint)ELSA-2013-16612013-11-25
Oracle Linux version 6 (openmpi)ELSA-2013-16612013-11-25
Oracle Linux version 6 (perftest)ELSA-2013-16612013-11-25
Oracle Linux version 6 (qperf)ELSA-2013-16612013-11-25
Oracle Linux version 6 (rdma)ELSA-2013-16612013-11-25


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete