PT-2017-4166 · Gnu +6 · Libtirpc +7

🗓️ 03 May 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Remote denial of service via crafted UDP to port 111 causes memory exhaustion in rpcbind and related libraries.

Reporter	Title	Published	Views	Family All 331
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Glibc affect IBM Security Network Controller (CVE-2016-3706, CVE-2016-4429)	16 Jun 201821:49	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in rpcbind affects PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple glibc vulnerabilities (CVE-2016-1234, CVE-2016-3706, CVE-2016-4429)	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in libtirpc affects PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libtirpc affects Power Hardware Management Console (CVE-2017-8779)	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM Security Network Active Bypass (CVE-2016-3706, CVE-2016-4429)	16 Jun 201821:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	25 Feb 201920:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libtirpc (CVE-2018-14622 CVE-2018-14621)	7 Dec 202322:45	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/rpc/rpcbomb.rb
exploit-db	www.exploit-db.com/exploits/41974
github	www.github.com/drbothen/GO-RPCBOMB
bdu	www.bdu.fstec.ru/vul/2021-05819
errata	www.errata.altlinux.org/ALT-PU-2017-1816
ubuntu	www.ubuntu.com/security/notices/USN-4986-4
cve	www.cve.org/CVERecord
linux	www.linux.oracle.com/errata/ELSA-2017-1263.html
security-tracker	www.security-tracker.debian.org/tracker/DSA-3845-1
usn	www.usn.ubuntu.com/3759-1

05 Aug 2024 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 27.8

CVSS 3.17.5

CVSS 35.3 - 7.5

EPSS0.81381