CVE-2017-10772

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" with RPC initializati...

The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the nfsd kernel subsystem of Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure through a long RPC response related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and...

kernel: nfsd: Incorrect handling of long RPC replies

The NFS2/3 RPC client could send long arguments to the NFS server. These encoded arguments are stored in an array of memory pages, and accessed using pointer variables. Arbitrarily long arguments could make these pointers point outside the array and cause an out-of-bounds memory access. A remote...

UBUNTU-CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

VulnCheck KEV: CVE-2004-0116

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2017-12781)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in RPC in Microsoft Windows. A remote attacker could exploit this vulnerability to execute arbitrary code on the target system...

Cisco IOS XR Software Local Denial of Service Vulnerability (CNVD-2017-13743)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS XR Software, which can be exploited by a remote attacker to cause a denial of service process reloading by exploiting a memory...

DEBIAN-CVE-2017-9431

Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c...

CentOS Update for rpcbind CESA-2017:1267 centos6

Check the version of rpcbind SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882722";...

RedHat Update for rpcbind RHSA-2017:1267-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2017-9065

In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API...

CVE-2017-3876

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

The vulnerability of the Solaris operating system, which allows a malicious individual to compromise the confidentiality of information

The vulnerability of the Oracle Sun Systems Products Suite component sub-component Kernel RPC of the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through network...

ALPINE-CVE-2017-8779

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with no subsequent free via a...

Linux kernel denial of service vulnerability (CNVD-2017-06843)

Linux is an open source computer operating system kernel. A denial of service vulnerability exists in the NFSv2/NFSv3 server in the nfsd subsystem of Linux kernel version 4.10.11. It allows remote attackers to cause a denial of service via a long RPC reply...

WatchGuard Fireware Denial of Service Vulnerability

WatchGuard Fireware is a firewall appliance from WatchGuard USA that provides intrusion protection, spam filtering, SSL VPN and more with intelligent layering technology. A denial of service vulnerability exists in WatchGuard Fireware v11.12.1 and prior versions. An attacker can exploit this...

CVE-2017-8056

WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity XXE, in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new...

Google gRPC heap buffer overflow vulnerability (CNVD-2017-06015)

gRPC is an open source RPC framework . A heap buffer overflow vulnerability exists in the parseunix function within Google gRPC core/ext/clientchannel/parseaddress.c, which allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

WatchGuard Fireware XML-RPC User Enumeration Vulnerability

The full name of XML-RPC is XML Remote Procedure Call, that is, XML a subset under Standard Generalized Markup Language remote procedure call. A user enumeration vulnerability exists in WatchGuard Fireware XML-RPC, where when a login attempt is made using a blank password directly on the login...

WatchGuard Fireware XML-RPC External Entity Extension Denial of Service Vulnerability

The full name of XML-RPC is XML Remote Procedure Call, that is, XML a subset under Standard Generalized Markup Language remote procedure call. An external entity extension denial of service vulnerability exists in WatchGuard Fireware XML-RPC, which can be exploited by an attacker to crash the...