CVE-2012-4517 ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openfabrics ibacm | <= 1.0.5 | No fix listed |
References
- [linux-rdma] 20120413 [ANNOUNCE] ibacm release 1.0.6 mailing-list patch
- git.openfabrics.org
- RHSA-2013:0509 vendor-advisory
- [oss-security] 20121011 CVE Request -- librdmacm (one issue) / ibacm (two issues) mailing-list
- [oss-security] 20121011 Re: CVE Request -- librdmacm (one issue) / ibacm (two issues) mailing-list
- 55890 vdb-entry
- bugzilla.redhat.com
- ibacm-connections-dos(79396) vdb-entry