PatchTheCVEibutils vulnerabilities and fixes
Recent CVEs affecting ibutils, with upgrade or downgrade steps. 2 tracked.
ibutils has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-04-15. Highest priority: CVE-2013-2561 (score 43/100).
- CVE-2013-2561 MEDIUM 6.3 MITIGATE DOWNGRADE OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagne
- CVE-2008-3277 MEDIUM 4.4 DOWNGRADE Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils pac
FAQ
How do I fix ibutils vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ibutils being exploited right now?
None of the tracked ibutils CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ibutils CVE should I patch first?
CVE-2013-2561 currently ranks highest (43/100): OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagne.