Red Hat Security Advisory

RHSA-2022:8400

libtirpc security update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) libtirpc-devel-1.3.3-0.el9
Red Hat Enterprise Linux BaseOS (v. 9) libtirpc-1.3.3-0.el9

Fixes 1 record

TI-2021-21520 CVE-2021-46828 · GHSA-x62c-6mxr-74fh

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a…

MEDIUM 45

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03204 Published 2022-07-20 Partial fix CWE-755