Command injection

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user...

CVE-2021-37106

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user...

CVE-2021-37106

CVE-2021-37106 affects Huawei FusionCompute CMA service module (versions 6.3.0, 6.3.1, 6.5.0 and 8.0.0). The issue is a command injection vulnerability that occurs when processing the default certificate file, where external input from users is used to build part of a command without sufficient v...

CVE-2021-37106: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user...

Huawei FusionCompute Command Injection Vulnerability (CNVD-2021-84882)

Huawei FusionCompute is a computer virtualization engine from Huawei China. A command injection vulnerability exists in the CMA service of the Huawei FusionCompute product, which provides Virtual Resource Manager VRM and Compute Node Agent CNA. The vulnerability stems from the fact that special...

PT-2021-4899

Name of the Vulnerable Software and Affected Versions FusionCompute versions 6.3.0 through 6.3.1 FusionCompute version 6.5.0 FusionCompute version 8.0.0 Description The issue is related to a command injection vulnerability in the CMA service module of FusionCompute. This occurs when the software...

PT-2024-11387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the RDMA/cma component in the Linux kernel, where the Finite State Machine FSM can enter a cycle, allowing rdma resolve ip to be called twice on the same id priv...

PT-2024-11388

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A listener leak issue in the RDMA/cma component of the Linux kernel has been resolved. The issue occurs when cma listen on all fails, leaving the per-device ID on the listen list without...

GSD-2021-1001487 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.276 by commit...

UVI-2021-1001487 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.276 by commit...

GSD-2021-1001457 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.276 by commit...

UVI-2021-1001457 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.276 by commit...

UVI-2021-1001428 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.240 by commit...

GSD-2021-1001352 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...

UVI-2021-1001352 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...

GSD-2021-1001293 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...

UVI-2021-1001293 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...

PT-2021-25689

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29817

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description A memory leak issue was discovered in the RDMA/cma component, specifically in the rdma resolve route function. The actual impact and attack plausibility of this issue have not yet been proven...