CVE-2012-4517: ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote...

Security readout for executives and security teams

CVE-2012-4517 is a remote denial-of-service issue in ibacm before 1.0.6. A crafted multicast join response can crash the ibacm service. The reported impact is service availability, not data theft or code execution. Exposure is most relevant to systems using RDMA/InfiniBand userspace components where ibacm is installed and running. Likely limited to RDMA/InfiniBand environments using ibacm. Generic internet-facing web applications are unlikely to be affected unless the underlying host uses the vulnerable ibacm service and accepts relevant network traffic. Treat as a targeted availability risk for specialized RDMA infrastructure, not a broad enterprise emergency. Prioritize patching where ibacm supports production workloads or clustered systems that depend on RDMA availability. Mitigation focus: Upgrade ibacm to version 1.0.6 or later where available.; Apply vendor updates, including relevant Red Hat security advisories.; Check OpenFabrics or distribution guidance for supported fixed packages..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.