libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c

A null-pointer dereference vulnerability was found in libtirpc. The return value of makefdxprt was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash ...

Low: Red Hat Bug Fix Advisory: libtirpc bug fix update

An update for libtirpc is now available for Red Hat Enterprise Linux 7. The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call TI-RPC documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. For detailed...

Fedora 26 : libtirpc (2017-57e8f5ec61)

Fix for CVE-2017-8779 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Virtuozzo 7 : libtirpc / libtirpc-devel (VZLSA-2017-1263)

An update for libtirpc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Virtuozzo 6 : rpcbind (VZLSA-2017-1267)

An update for rpcbind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Slackware 14.2 / current : libtirpc (SSA:2017-191-01)

New libtirpc packages are available for Slackware 14.2 and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-191-01. The text itself is copyright C...

[slackware-security] libtirpc

New libtirpc packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libtirpc-1.0.1-i586-3slack14.2.txz: Rebuilt. Patched a bug which can cause a denial of service through memory exhaustion. Thanks to...

PT-2018-12621

Name of the Vulnerable Software and Affected Versions libtirpc versions prior to 1.0.2-rc2 Description An infinite loop issue was discovered, which occurs when the server exhausts its file descriptors, causing it to enter an infinite loop and consume a large amount of CPU time. This results in a...

MGASA-2017-0183 Updated rpcbind/libtirpc packages fix security vulnerability

It was discovered that rpcbind and libtirpc contain a vulnerability that allows an attacker to allocate any amount of bytes up to 4 gigabytes per attack on a remote rpcbind host, and the memory is never freed unless the process crashes or the administrator halts or restarts the rpcbind service...

Updated rpcbind/libtirpc packages fix security vulnerability

It was discovered that rpcbind and libtirpc contain a vulnerability that allows an attacker to allocate any amount of bytes up to 4 gigabytes per attack on a remote rpcbind host, and the memory is never freed unless the process crashes or the administrator halts or restarts the rpcbind service...

[SECURITY] Fedora 26 Update: libtirpc-1.0.1-4.rc3.fc26

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

EulerOS 2.0 SP2 : libtirpc (EulerOS-SA-2017-1097)

According to the version of the libtirpc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that due to the way rpcbind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. An attacker...

EulerOS 2.0 SP1 : libtirpc (EulerOS-SA-2017-1096)

According to the version of the libtirpc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that due to the way rpcbind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. An attacker...

Amazon Linux AMI : libtirpc (ALAS-2017-840)

Memory leak when failing to parse XDR strings or bytearrays It was found that due to the way rpcbind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. An attacker sending thousands of messages to rpcbind could cause its memory usage to grow without boun...

GLSA-201706-07 : Libtirpc and RPCBind: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201706-07 Libtirpc and RPCBind: Denial of Service It was found that due to the way RPCBind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. Impact : A remote attacker could send thousan...

Libtirpc and RPCBind: Denial of Service

Background The RPCBind utility is a server that converts RPC program numbers into universal addresses. Libtirpc is a port of Suns Transport-Independent RPC library to Linux. Description It was found that due to the way RPCBind uses libtirpc libntirpc, a memory leak can occur when parsing speciall...

Important: libtirpc

Issue Overview: Memory leak when failing to parse XDR strings or bytearrays It was found that due to the way rpcbind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. An attacker sending thousands of messages to rpcbind could cause its memory usage to...

SUSE SLES11 Security Update : libtirpc, rpcbind (SUSE-SU-2017:1468-1)

This update for libtirpc and rpcbind fixes the following issues : - CVE-2017-8779: A crafted UDP package could lead rpcbind to remote denial-of-service. bsc1037559 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

Internet Bug Bounty: rpcbind "rpcbomb" CVE-2017-8779, CVE-2017-8804

Description: this allowed an attacker to easily disrupt a remote system through excessive memory consumption. Writeup: https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/ Demonstration video: https://www.youtube.com/watch?v=b38H3oEgrQw this video shows...

SUSE-SU-2017:1468-1 Security update for libtirpc, rpcbind

This update for libtirpc and rpcbind fixes the following issues: - CVE-2017-8779: A crafted UDP package could lead rpcbind to remote denial-of-service. bsc1037559...