PatchTheCVEopenfabrics vulnerabilities
Recent CVEs affecting openfabrics products. 5 tracked.
openfabrics has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-04-15. Highest priority: CVE-2013-2561 (score 43/100).
- CVE-2013-2561 MEDIUM 6.3 MITIGATE DOWNGRADE OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagne
- CVE-2012-4518 LOW 3.6 DOWNGRADE ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm da
- CVE-2012-4517 MEDIUM 5.0 UPGRADE ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote at
- CVE-2012-4516 MEDIUM 5.8 DOWNGRADE librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to sp
- CVE-2008-3277 MEDIUM 4.4 DOWNGRADE Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils pac
FAQ
How do I fix openfabrics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openfabrics being exploited right now?
None of the tracked openfabrics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openfabrics CVE should I patch first?
CVE-2013-2561 currently ranks highest (43/100): OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagne.