openfabrics records
8 published records for vendor openfabrics.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 62.5%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-59 Improper Link Resolution Before File Access ('Link Following')3
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-399 Resource Management Errors1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
25Monitor | CVE-2013-2561No exploit | OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) openfabrics · ibutils · CWE-59 | Medium6.3 | — | 0.4% | Nov 23, 2013 |
25Monitor | CVE-2010-1693No exploit | openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmpopenfabrics · enterprise distribution · CWE-59 | Medium6.3 | — | 0.3% | Oct 26, 2010 |
24Monitor | CVE-2012-4516No exploit | librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution iopenfabrics · librdmacm | Medium5.8 | — | 2.1% | Oct 22, 2012 |
21Monitor | CVE-2012-4517No exploit | ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of sopenfabrics · ibacm · CWE-399 | Medium5.0 | — | 2.8% | Oct 22, 2012 |
17Monitor | CVE-2008-3277No exploit | Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.eopenfabrics · ibutils · CWE-22 | Medium4.4 | — | 0.4% | Apr 15, 2014 |
14Monitor | CVE-2012-4518No exploit | ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.openfabrics · ibacm · CWE-264 | Low3.6 | — | 0.3% | Oct 22, 2012 |
13Monitor | CVE-2010-4173No exploit | The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbiopenfabrics · libsdp · CWE-59 | Low3.3 | — | 0.2% | Nov 22, 2010 |
8Monitor | CVE-2011-3345No exploit | ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Entopenfabrics · enterprise distribution · CWE-119 | Low2.1 | — | 0.3% | Sep 19, 2011 |
- CVE-2013-256125Monitor
OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3)
MediumCVSS 6.3No exploitEPSS 0%openfabrics · ibutilsNov 23, 2013
- CVE-2010-169325Monitor
openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp
MediumCVSS 6.3No exploitEPSS 0%openfabrics · enterprise distributionOct 26, 2010
- CVE-2012-451624Monitor
librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution i
MediumCVSS 5.8No exploitEPSS 2%openfabrics · librdmacmOct 22, 2012
- CVE-2012-451721Monitor
ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of s
MediumCVSS 5.0No exploitEPSS 2%openfabrics · ibacmOct 22, 2012
- CVE-2008-327717Monitor
Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.e
MediumCVSS 4.4No exploitEPSS 0%openfabrics · ibutilsApr 15, 2014
- CVE-2012-451814Monitor
ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.
LowCVSS 3.6No exploitEPSS 0%openfabrics · ibacmOct 22, 2012
- CVE-2010-417313Monitor
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbi
LowCVSS 3.3No exploitEPSS 0%openfabrics · libsdpNov 22, 2010
- CVE-2011-33458Monitor
ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Ent
LowCVSS 2.1No exploitEPSS 0%openfabrics · enterprise distributionSep 19, 2011