Lucene search

K
redhatRedHatRHSA-2013:0884
HistoryMay 30, 2013 - 12:00 a.m.

(RHSA-2013:0884) Moderate: libtirpc security update

2013-05-3000:00:00
access.redhat.com
14

0.171 Low

EPSS

Percentile

96.1%

These packages provide a transport-independent RPC (remote procedure call)
implementation.

A flaw was found in the way libtirpc decoded RPC requests. A
specially-crafted RPC request could cause libtirpc to attempt to free a
buffer provided by an application using the library, even when the buffer
was not dynamically allocated. This could cause an application using
libtirpc, such as rpcbind, to crash. (CVE-2013-1950)

Red Hat would like to thank Michael Armstrong for reporting this issue.

Users of libtirpc should upgrade to these updated packages, which contain a
backported patch to correct this issue. All running applications using
libtirpc must be restarted for the update to take effect.