CVE-2012-4516 librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm servic...

MediumCVSS 5.8 EPSS 2.1%

Published: 2012-10-23 02:00
Updated: 2026-06-17 02:45
Exploit status: No public exploit known

Description

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service.

Affected products

Product	Affected versions	Fixed in
openfabrics librdmacm	= 1.0.16	No fix listed

References

git.openfabrics.org
[oss-security] 20121011 CVE Request -- librdmacm (one issue) / ibacm (two issues) mailing-list
[oss-security] 20121011 Re: CVE Request -- librdmacm (one issue) / ibacm (two issues) mailing-list
55896 vdb-entry
bugzilla.redhat.com

CVSS v2.0

5.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.11% (percentile 82.1)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.