Red Hat Security AdvisoryRHSA-2013:0509
rdma security, bug fix and enhancement update
Released 2013-02-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) infinipath-psm-3.0.1-115.1015_open.1.el6, libibverbs-1.1.6-5.el6, librdmacm-1.0.17-0.git4b5c1aa.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibacm-devel-1.0.8-0.git7a3adb7.el6, infinipath-psm-3.0.1-115.1015_open.1.el6 +22
- Red Hat Enterprise Linux HPC Node (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibsim-0.5-7.el6, ibutils-1.5.7-7.el6 +16
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibacm-devel-1.0.8-0.git7a3adb7.el6, ibutils-1.5.7-7.el6 +20
- Red Hat Enterprise Linux Server (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibsim-0.5-7.el6, ibutils-1.5.7-7.el6 +25
- Red Hat Enterprise Linux Server Optional (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibacm-devel-1.0.8-0.git7a3adb7.el6, ibacm-devel-1.0.8-0.git7a3adb7.el6.ppc +29
- Red Hat Enterprise Linux Workstation (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibsim-0.5-7.el6, ibutils-1.5.7-7.el6 +16
- Red Hat Enterprise Linux Workstation Optional (v. 6) ibacm-1.0.8-0.git7a3adb7.el6, ibacm-devel-1.0.8-0.git7a3adb7.el6, ibutils-1.5.7-7.el6 +22
Fixes 2 records
Priority LOW 28
ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02821 · Published 2012-10-22 · Fixed CWE-399
Priority LOW 17
ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00361 · Published 2012-10-22 · Fixed CWE-264
