| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise distribution | = 1.1= 1.2.5= 1.3= 1.3.1= 1.3.2= 1.4= 1.4.1= 1.4.2= 1.5= 1.5.1≤ 1.5.2 |
ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly handle certain non-array variables, which allows local users to cause a denial of service (stack memory corruption and system crash) by reading the /proc/net/sdpstats file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free