Oracle: Security Advisory (ELSA-2013-0884)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-199)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-3373 · None +3 · Libtirpc +3

Name of the Vulnerable Software and Affected Versions: libtirpc versions prior to 0.3.3-rc3 Description: A null-pointer dereference issue was found in the makefd xprt function, where the return value was not checked in all instances. This could lead to a crash when the server exhausts the maximum...

CentOS Information Disclosure

The vulnerability of the libtirpc-0.2.1 package in the CentOS operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out remotely...

Red Hat Enterprise Linux Compromise Protected Information

The vulnerability of the libtirpc-0.2.1 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Enterprise Linux Compromise Protected Information

The vulnerability of the libtirpc-debuginfo-0.2.1 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Enterprise Linux Compromise Protected Information

The vulnerability of the libtirpc-devel-0.2.1 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

CentOS Information Disclosure

The vulnerability of the libtirpc-debuginfo-0.2.1 package in the CentOS operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out remotely...

CentOS Information Disclosure

The vulnerability of the libtirpc-devel-0.2.1 package on the CentOS operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Amazon Linux AMI : libtirpc (ALAS-2013-199)

A flaw was found in the way libtirpc decoded RPC requests. A specially crafted RPC request could cause libtirpc to attempt to free a buffer provided by an application using the library, even when the buffer was not dynamically allocated. This could cause an application using libtirpc, such as...

Oracle Linux 6 : libtirpc (ELSA-2013-0884)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0884 advisory. 0.2.1-64 - Removed a svcfreeargs call from svcdgfreeargs bz 953735 Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

Design/Logic Flaw

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

CVE-2013-1950 affects libtirpc up to version 0.2.3, where a crafted Sun RPC request can trigger a free of an invalid pointer, causing DoS (rpcbind crash). Public notes in connected advisories (RHEL, Oracle Linux, Amazon Linux, MiracleLinux, F5 SOL/K19157x) confirm the vulnerability and list a fix...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950: Undefined Security Weakness

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

Medium: libtirpc

Issue Overview: A flaw was found in the way libtirpc decoded RPC requests. A specially-crafted RPC request could cause libtirpc to attempt to free a buffer provided by an application using the library, even when the buffer was not dynamically allocated. This could cause an application using...

RHEL 6 : libtirpc (RHSA-2013:0884)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0884 advisory. These packages provide a transport-independent RPC remote procedure call implementation. A flaw was found in the way libtirpc decoded RPC requests. A...