CVE-2011-3345: Openfabrics Enterprise Distribution

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly handle certain non-array variables, which allows local users to cause a denial of service (stack memory corruption and system crash) by reading the /proc/net/sdpstats file.

Affected products

• Openfabrics Enterprise Distribution: up to and including 1.5.2; version 1.1 only; version 1.2.5 only; version 1.3 only; version 1.3.1 only; version 1.3.2 only; …

Published 2011-09-19. Last modified 2026-06-16.