CVE-2011-3345 ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly h...
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly handle certain non-array variables, which allows local users to cause a denial of service (stack memory corruption and system crash) by reading the /proc/net/sdpstats file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openfabrics enterprise distribution | <= 1.5.2 | No fix listed |
| openfabrics enterprise distribution | = 1.1 | No fix listed |
| openfabrics enterprise distribution | = 1.2.5 | No fix listed |
| openfabrics enterprise distribution | = 1.3 | No fix listed |
| openfabrics enterprise distribution | = 1.3.1 | No fix listed |
| openfabrics enterprise distribution | = 1.3.2 | No fix listed |
| openfabrics enterprise distribution | = 1.4 | No fix listed |
| openfabrics enterprise distribution | = 1.4.1 | No fix listed |
| openfabrics enterprise distribution | = 1.4.2 | No fix listed |
| openfabrics enterprise distribution | = 1.5 | No fix listed |
| openfabrics enterprise distribution | = 1.5.1 | No fix listed |
References
- git.openfabrics.org
- 45861 third-party-advisory vendor-advisory
- [oss-security] 20110906 CVE Request: OFED 1.5.2 /proc/net/sdpstats reading local denial of service/crash mailing-list patch
- [oss-security] 20110907 Re: CVE Request: OFED 1.5.2 /proc/net/sdpstats reading local denial of service/crash mailing-list patch
- [oss-security] 20110907 Re: CVE Request: OFED 1.5.2 /proc/net/sdpstats reading local denial of service/crash mailing-list
- 49486 vdb-entry
- ofed-sdpstats-dos(69631) vdb-entry