Red Hat Security AdvisoryRHSA-2013:0884
libtirpc security update
Released 2013-05-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libtirpc-0.2.1-6.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtirpc-0.2.1-6.el6_4, libtirpc-devel-0.2.1-6.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) libtirpc-0.2.1-6.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtirpc-0.2.1-6.el6_4, libtirpc-devel-0.2.1-6.el6_4
- Red Hat Enterprise Linux Server (v. 6) libtirpc-0.2.1-6.el6_4, libtirpc-0.2.1-6.el6_4.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) libtirpc-0.2.1-6.el6_4, libtirpc-devel-0.2.1-6.el6_4, libtirpc-devel-0.2.1-6.el6_4.ppc
- Red Hat Enterprise Linux Workstation (v. 6) libtirpc-0.2.1-6.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtirpc-0.2.1-6.el6_4, libtirpc-devel-0.2.1-6.el6_4
Fixes 1 record
Priority LOW 29
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0646 · Published 2013-07-09 · Fixed CWE-399
