Denial Of Service (DoS)

🗓️ 20 Jul 2022 11:06:47Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

libtirpc.so denial of service vulnerability in svc_run due to improper handling of idle TCP connections that allows for crashing the application with malicious inpu

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202502:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, systemd, and Golang Go	28 Sep 202209:47	–	ibm
Tenable Nessus	Amazon Linux 2023 : libtirpc, libtirpc-devel (ALAS2023-2025-890)	7 Mar 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : libtirpc (ALSA-2022:8400)	18 Nov 202200:00	–	nessus
Tenable Nessus	Debian dla-3071 : libtirpc-common - security update	11 Aug 202200:00	–	nessus
Tenable Nessus	Debian DSA-5200-1 : libtirpc - security update	7 Aug 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : libtirpc (EulerOS-SA-2022-2298)	14 Sep 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : libtirpc (EulerOS-SA-2022-2327)	14 Sep 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : libtirpc (EulerOS-SA-2022-2353)	24 Sep 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : libtirpc (EulerOS-SA-2022-2389)	24 Sep 202200:00	–	nessus

Vulners

Node

libtirpc_project libtirpcMatch1.3.2-r0java

AND

alpinelinux alpine_linuxMatch3.15

libtirpc_project libtirpcMatch1.2.5-r0java

AND

libtirpc_project libtirpcMatch1.2.5-r2java

AND

libtirpc_project libtirpcMatch1.2.6-r0java

AND

libtirpc_project libtirpcMatch1.3.2-r1java

AND

libtirpc_project libtirpcMatch1.3.2-r0java

AND

libtirpc_project libtirpcMatch1.2.5-r3java

AND

libtirpc_project libtirpcMatch1.3.1-r0java

AND

alpinelinux alpine_linuxMatchedge

libtirpc_project libtirpcMatch1.3.2-r0java

AND

alpinelinux alpine_linuxMatch3.14

libtirpc_project libtirpcMatch1.3.1-r0java

AND

alpinelinux alpine_linuxMatch3.13

libtirpc_project libtirpcMatch1.3.2-r0java

AND

alpinelinux alpine_linuxMatch3.16

libtirpc.so libtirpc.soRange1.0.10.debug–3.0.0java

libtirpc_project libtirpcMatch0.2.1_15.el6

libtirpc_project libtirpcMatch0.2.1_11.el6

libtirpc_project libtirpcMatch0.2.1_13.el6

libtirpc_project libtirpcMatch0.2.1_6.el6_4

libtirpc_project libtirpcMatch0.2.1_6.el6_5.1

libtirpc_project libtirpcMatch0.2.1_6.el6_5.2

libtirpc_project libtirpcMatch0.2.1_11.el6_8

libtirpc_project libtirpcMatch1.1.4_5.el8

libtirpc_project libtirpcMatch0.2.4_0.16.el7

libtirpc_project libtirpcMatch1.1.4_4.el8

libtirpc_project libtirpcMatch0.2.1_3.el6

libtirpc_project libtirpcMatch0.2.1_10.el6

libtirpc_project libtirpcMatch0.2.1_1.el6

libtirpc_project libtirpcMatch0.2.1_5.el6

libtirpc_project libtirpcMatch1.1.4_3.el8

libtirpc_project libtirpcMatch0.2.4_0.15.el7

libtirpc_project libtirpcMatch0.2.1_13.el6_9

Source	Link
github	www.github.com/javamelody/javamelody/commit/e0497c1980acebd257d3da78dfde29ae9bdffdf6
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00004.html
debian	www.debian.org/security/2022/dsa-5200
security	www.security.gentoo.org/glsa/202210-33
git	www.git.linux-nfs.org/
git	www.git.linux-nfs.org/
security	www.security.netapp.com/advisory/ntap-20221007-0004/

07 Nov 2023 22:09Current

2.7Low risk

Vulners AI Score2.7

CVSS 3.17.5

EPSS0.01199