Advisory ROSA-SA-2024-2339

Software: libtirpc 1.1.4
OS: ROSA Virtualization 2.1

package_evr_string: libtirpc-1.1.4-8.rv3.src.rpm

CVE-ID: CVE-2021-46828
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: In libtirpc, remote attackers could exhaust the file descriptors of a process using libtirpc because idle TCP connections are not handled properly. This, in turn, could lead to an endless svc_run loop without accepting new connections.
CVE-STATUS: Fixed
CVE-REV: Run the yum update libtirpc command to close it