Null pointer dereference

2018-08-3013:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq14.04
ubuntu_linuxeq18.04
debian_linuxeq8.0
libtirpclt0.3.3
enterprise_linuxeq7.0
enterprise_linux_desktopeq7.0
enterprise_linux_server_auseq7.4
enterprise_linux_server_euseq7.4
enterprise_linux_server_euseq7.5

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	14.04
ubuntu_linux	eq	18.04
debian_linux	eq	8.0
libtirpc	lt	0.3.3
enterprise_linux	eq	7.0
enterprise_linux_desktop	eq	7.0
enterprise_linux_server_aus	eq	7.4
enterprise_linux_server_eus	eq	7.4
enterprise_linux_server_eus	eq	7.5