Content Spoofing

librdmacm is vulnerable to content spoofing. A static port 6125 is used to connect to the ibacm service by default. This allows a local attacker to host a malicious ibacm service on the same port to provide incorrect address resolution information to all librmdacm applications...

CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

UBUNTU-CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

CVE-2012-4516

CVE-2012-4516 affects librdmacm 1.0.16 where ibacm.port is not specified and the service connects to port 6125, enabling a remote attacker to influence the application’s address resolution via a malicious ib_acm service. Public records in multiple advisories note the fix in librdmacm 1.0.17 and a...

PT-2012-5454 · Openfabrics Alliance +2 · Librdmacm +2

Name of the Vulnerable Software and Affected Versions: librdmacm version 1.0.16 Description: The issue allows remote attackers to specify address resolution information for the application via a malicious ib acm service when ibacm.port is not specified, causing librdmacm to connect to port 6125...