USN-5092-1: Linux kernel vulnerabilities

Valentina Palmiotti discovered that the iouring subsystem in the Linux kernel could be coerced to free adjacent memory. A local attacker could use this to execute arbitrary code. CVE-2021-41073 Ofek Kirzner, Adam Morrison, Benedict Schlueter, and Piotr Krysiuk discovered that the BPF verifier in...

PT-2024-11106 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been resolved in the Linux kernel. The issue occurs when alloc pages node returns null in svc rqst alloc, causing the null rq scratch page pointer ...

SUN-RPC Portmapper DUMP Call

SUN-RPC has a scanning interface. This mode may be used to gather information on a server, such as the services and applications running on it. This protection detects use of the SUN-RPC interface scanning...

CVE-2017-10608

Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target...

DEBIAN-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

UBUNTU-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

UBUNTU-CVE-2017-7645

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service system crash via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c...

Fedora 24 : glibc (2016-3c5d606035)

This updated addresses a minor security vulnerability in the Sun RPC client CVE-2016-4429, increases compatibility with GCC 6, and addresses a problem which caused fork to crash when BINDNOW was used for linking shared objects. Note that Tenable Network Security has extracted the preceding...

SUN-RPC Programs Lookup - ver 2

SUN-RPC has a scanning interface. This mode may be used to gather information on a server, such as the services and applications running on it. This protection detects and blocks use of the SUN-RPC interface scanning...

FreeBSD-SA-15:24.rpcbind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:24.rpcbind Security Advisory The FreeBSD Project Topic: rpcbind8 remote denial of service REVISED Category: core Module: rpcbind Announced: 2015-09-29,...

MIT Kerberos ASN.1 asn1_decode_generaltime Uninitialized Pointer Reference - Ver2 (CVE-2009-0846)

MIT Kerberos V5 is an implementation of the Kerberos protocol that allows for the negotiation of an authenticated, and optionally encrypted, communication channel between two points on a network. The MIT Kerberos V5 server utilizes the encrypted SUN-RPC protocol to communicate with its remote...

CA BrightStor ARCserve Backup Media Server SUN-RPC Procedure Code Execution - Ver2 (CVE-2007-1785)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

CVE-2013-1950

CVE-2013-1950 affects libtirpc up to version 0.2.3, where a crafted Sun RPC request can trigger a free of an invalid pointer, causing DoS (rpcbind crash). Public notes in connected advisories (RHEL, Oracle Linux, Amazon Linux, MiracleLinux, F5 SOL/K19157x) confirm the vulnerability and list a fix...

PT-2013-1185 · None +3 · Libtirpc-Debuginfo +5

Name of the Vulnerable Software and Affected Versions: libtirpc versions 0.2.1 through 0.2.3 libtirpc-devel versions 0.2.1 libtirpc-debuginfo versions 0.2.1 Description: The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information. Thi...

PT-2011-4379 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.12 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

PT-2010-3251 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.2 through 7.24 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.05.18 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...