Fluid Attacks Database

Description

ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel6	ibsim	<0:0.5-7.el6	0:0.5-7.el6
rpm rhel6	infinipath-psm	<0:3.0.1-115.1015_open.1.el6	0:3.0.1-115.1015_open.1.el6
rpm rhel6	libibverbs	<0:1.1.6-5.el6	0:1.1.6-5.el6
rpm rhel6	opensm	<0:3.3.15-1.el6	0:3.3.15-1.el6
rpm rhel6	ibacm	<0:1.0.8-0.git7a3adb7.el6	0:1.0.8-0.git7a3adb7.el6
rpm rhel6	ibutils	<0:1.5.7-7.el6	0:1.5.7-7.el6
rpm rhel6	infiniband-diags	<0:1.5.12-5.el6	0:1.5.12-5.el6
rpm rhel6	libibmad	<0:1.3.9-1.el6	0:1.3.9-1.el6
rpm rhel6	libibumad	<0:1.3.8-1.el6	0:1.3.8-1.el6
rpm rhel6	libmlx4	<0:1.0.4-1.el6	0:1.0.4-1.el6

1-10 of 12

Aliases

1. CVE-2012-45172. NVD-2012-45173. OSV-2012-4517

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.