PT-2021-1562 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the...

PT-2021-1808 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system's Remote Procedure Call RPC runtime environment. This can be exploited by a remote attacker to execute...

PT-2021-1594 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. This allows a remote attacker to execute arbitrary code. The estimated...

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.

...

An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.

...

PT-2020-6233 · P11 Kit +8 · P11-Kit +8

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.21.1 through 0.23.21 Description: A heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library. When the remote entity supplies a byte array through...

DEBIAN-CVE-2020-14383

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...

Consul’s HTTP/RPC Services Allow Unbounded Resource Usage, Susceptible to Unauthenticated Denial of Service

Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that unbounded resource usage, triggered by the establishment of many unauthenticated HTTP or RPC connections, may generate excessive load and/or crash the server. This vulnerability, CVE-2020-7219, affects all...

Denial of Service Vulnerability in ZDCC VisualField VFRemoteCmdImpl.dll Component

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...

Denial of Service Vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll Component (CNVD-2020-69505)

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDAC, which can be exploited by an attacker to cause the RPC service ...

Denial of Service Vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll Component (CNVD-2020-69506)

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...

Denial of service vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll component (CNVD-2020-69503)

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...

Denial of Service Vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll Component (CNVD-2020-69502)

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...

Denial of Service Vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll Component (CNVD-2020-69504)

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...

Denial of Service Vulnerability in ZDZ VisualField VFRemoteCmdImpl.dll Component (CNVD-2020-69507)

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFRemoteCmdImpl.dll component of ZDCC, which can be exploited by an attacker to cause the RPC service ...

UBUNTU-CVE-2020-14383

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...

CVE-2020-4491

IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number of RPC requests to the mmfsd daemon which would cause the service to crash. IBM X-Force ID: 181991...

PT-2020-5780 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to a lack of privilege management mechanism in the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system. This allows attackers to gain...

CVE-2019-11855

An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9...

CVE-2020-1383

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system To exploit this vulnerability, an attacker would need to run a...