Lucene search
HistoryJul 09, 2013 - 5:55 p.m.
CVE-2013-1950
cve-2013-1950
libtirpc
denial of service
remote attackers
rpcbind crash
sun rpc
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
5.2 Medium
AI Score
Confidence
High
0.171 Low
EPSS
Percentile
96.1%
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
Affected configurations
Node
libtirpc_projectlibtirpcRange≤0.2.3
ORlibtirpc_projectlibtirpcMatch0.1.8
ORlibtirpc_projectlibtirpcMatch0.1.9
ORlibtirpc_projectlibtirpcMatch0.1.10
ORlibtirpc_projectlibtirpcMatch0.1.11
ORlibtirpc_projectlibtirpcMatch0.2.0
ORlibtirpc_projectlibtirpcMatch0.2.1
ORlibtirpc_projectlibtirpcMatch0.2.2
Related
nessus
nessus
Amazon Linux AMI : libtirpc (ALAS-2013-199)
2013-09-04 00:00:00
Fedora 19 : libtirpc-0.2.3-2.fc19 (2013-6262)
2013-04-29 00:00:00
f5
f5
SOL19157044 - libtirpc vulnerability CVE-2013-1950
2016-02-18 00:00:00
K19157044 : libtirpc vulnerability CVE-2013-1950
2016-02-18 00:00:00
packetstorm
packetstorm
rpcbind CALLIT UDP Crash
2013-07-17 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libtirpc-0.2.3-2.fc19
2013-04-27 03:14:23
nvd
nvd
CVE-2013-1950
2013-07-09 17:55:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-199)
2015-09-08 00:00:00
RedHat Update for libtirpc RHSA-2013:0884-01
2013-05-31 00:00:00
Oracle: Security Advisory (ELSA-2013-0884)
2015-10-06 00:00:00
veracode
veracode
Denial Of Service (Dos)
2019-01-15 08:54:20
debiancve
debiancve
CVE-2013-1950
2013-07-09 17:55:00
ubuntucve
ubuntucve
CVE-2013-1950
2013-07-09 00:00:00
redhat
redhat
(RHSA-2013:0884) Moderate: libtirpc security update
2013-05-30 00:00:00
(RHSA-2013:1076) Important: rhev-hypervisor6 security and bug fix update
2013-07-16 00:00:00
prion
prion
Design/Logic Flaw
2013-07-09 17:55:00
oraclelinux
oraclelinux
libtirpc security update
2013-05-30 00:00:00
amazon
amazon
Medium: libtirpc
2013-06-11 22:45:00
cvelist
cvelist
CVE-2013-1950
2013-07-09 17:00:00
zdt
zdt
rpcbind (CALLIT Procedure) UDP Crash PoC
2013-07-16 00:00:00
centos
centos
libtirpc security update
2013-05-30 20:28:52
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
5.2 Medium
AI Score
Confidence
High
0.171 Low
EPSS
Percentile
96.1%
Related for CVE-2013-1950