CVE-2013-1950 The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an in...
MediumCVSS 4.3
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libtirpc project libtirpc | <= 0.2.3 | No fix listed |
| libtirpc project libtirpc | = 0.1.8 | No fix listed |
| libtirpc project libtirpc | = 0.1.9 | No fix listed |
| libtirpc project libtirpc | = 0.1.10 | No fix listed |
| libtirpc project libtirpc | = 0.1.11 | No fix listed |
| libtirpc project libtirpc | = 0.2.0 | No fix listed |
| libtirpc project libtirpc | = 0.2.1 | No fix listed |
| libtirpc project libtirpc | = 0.2.2 | No fix listed |
References
- Debian Security Tracker CVE-2013-1950 vendor-advisory
- git.infradead.org
- RHSA-2013:0884 vendor-advisory
- bugzilla.redhat.com