Libtirpc Project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Libtirpc Project records in CISA KEV

No Libtirpc Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libtirpc 5 records HIGH

Records

5 records

TI-2017-06291 CVE-2017-8779 · GHSA-fr7x-wc8q-h255

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC…

HIGH 73

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.8123 Published 2017-05-04 Fixed CWE-770

TI-2021-21520 CVE-2021-46828 · GHSA-x62c-6mxr-74fh

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a…

MEDIUM 45

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03204 Published 2022-07-20 Partial fix CWE-755

TI-2018-10487 CVE-2018-14622 · GHSA-359h-vjp2-hp47

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3.

LOW 39

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03861 Published 2018-08-30 Partial fix CWE-252

TI-2018-10486 CVE-2018-14621 · GHSA-362j-4wp6-47gj

Infinite loop in [UNKNOWN] libtirpc

LOW 37

An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02262 Published 2018-08-30 No fix listed CWE-835

TI-2013-01725 CVE-2013-1950 · GHSA-6g29-qg3g-jfjm

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to…

LOW 29

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0646 Published 2013-07-09 Fixed CWE-399

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0