CVE-2010-1693

OpenFabrics Enterprise Distribution (OFED) 1.5.2 vulnerable component: openibd. The flaw enables local users to overwrite arbitrary files via a symlink attack on the temporary file /tmp/ib_set_node_desc.sh. Root cause is a symlink/TOCTOU style issue in the code path handling node descriptor setup...

CVE-2011-3345

CVE-2011-3345 affects the OpenFabrics Enterprise Distribution (OFED) ib_sdp driver (InfiniBand) in the ibsdp module. The root cause is improper handling of certain non-array variables in sdp_proc.c, causing stack memory corruption that can crash the system when a local user reads /proc/net/sdpsta...