Red Hat Security AdvisoryRHSA-2017:1268
libtirpc security update
Released 2017-05-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libtirpc-0.2.1-13.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtirpc-devel-0.2.1-13.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) libtirpc-0.2.1-13.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtirpc-devel-0.2.1-13.el6_9
- Red Hat Enterprise Linux Server (v. 6) libtirpc-0.2.1-13.el6_9, libtirpc-0.2.1-13.el6_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) libtirpc-devel-0.2.1-13.el6_9, libtirpc-devel-0.2.1-13.el6_9.ppc
- Red Hat Enterprise Linux Workstation (v. 6) libtirpc-0.2.1-13.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtirpc-devel-0.2.1-13.el6_9
Fixes 1 record
Priority HIGH 73
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.8123 · Published 2017-05-04 · Fixed CWE-770
