Red Hat Security AdvisoryRHSA-2017:1263
libtirpc security update
Released 2017-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libtirpc-0.2.4-0.8.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) libtirpc-devel-0.2.4-0.8.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) libtirpc-0.2.4-0.8.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libtirpc-devel-0.2.4-0.8.el7_3
- Red Hat Enterprise Linux Server (v. 7) libtirpc-0.2.4-0.8.el7_3, libtirpc-0.2.4-0.8.el7_3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libtirpc-devel-0.2.4-0.8.el7_3, libtirpc-devel-0.2.4-0.8.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libtirpc-0.2.4-0.8.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) libtirpc-devel-0.2.4-0.8.el7_3
Fixes 1 record
Priority HIGH 73
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.8123 · Published 2017-05-04 · Fixed CWE-770
