Red Hat Security AdvisoryRHSA-2013:1661
RDMA stack security, bug fix, and enhancement update
Released 2013-11-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) infinipath-psm-3.0.1-115.1015_open.2.el6, libibverbs-1.1.7-1.el6, librdmacm-1.0.17-1.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) infinipath-psm-3.0.1-115.1015_open.2.el6, infinipath-psm-devel-3.0.1-115.1015_open.2.el6, libibverbs-1.1.7-1.el6 +12
- Red Hat Enterprise Linux HPC Node (v. 6) ibutils-1.5.7-8.el6, ibutils-libs-1.5.7-8.el6, infinipath-psm-3.0.1-115.1015_open.2.el6 +17
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ibutils-1.5.7-8.el6, ibutils-devel-1.5.7-8.el6, infinipath-psm-3.0.1-115.1015_open.2.el6 +10
- Red Hat Enterprise Linux Server (v. 6) ibutils-1.5.7-8.el6, ibutils-libs-1.5.7-8.el6, ibutils-libs-1.5.7-8.el6.ppc +24
- Red Hat Enterprise Linux Server Optional (v. 6) ibutils-1.5.7-8.el6, ibutils-devel-1.5.7-8.el6, ibutils-devel-1.5.7-8.el6.ppc +13
- Red Hat Enterprise Linux Workstation (v. 6) ibutils-1.5.7-8.el6, ibutils-libs-1.5.7-8.el6, infinipath-psm-3.0.1-115.1015_open.2.el6 +17
- Red Hat Enterprise Linux Workstation Optional (v. 6) ibutils-1.5.7-8.el6, ibutils-devel-1.5.7-8.el6, infinipath-psm-3.0.1-115.1015_open.2.el6 +11
Fixes 2 records
Priority LOW 30
librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02112 · Published 2012-10-22 · Fixed
Priority LOW 29
OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs,…
CVSS 2.0MEDIUM 6.3· Local · No auth · Interaction — · EPSS 0.00495 · Published 2013-11-23 · Partial fix CWE-59
