CVE-2018-14622 A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server...
HighCVSS 7.5
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libtirpc(Debian:12) | < 0.2.5-1.3 | 0.2.5-1.3 |
| debian/libtirpc(Debian:13) | < 0.2.5-1.3 | 0.2.5-1.3 |
| debian/libtirpc(Debian:14) | < 0.2.5-1.3 | 0.2.5-1.3 |
| libtirpc project libtirpc | < 0.3.3 | 0.3.3 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| [UNKNOWN] libtirpc | = 0.3.3-rc3 | No fix listed |
References
- Debian Security Tracker CVE-2018-14622 vendor-advisory
- git.linux-nfs.org
- RHBA-2017:1991 third-party-advisory vendor-advisory
- bugzilla.novell.com issue-tracking third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- [debian-lts-announce] 20180831 [SECURITY] [DLA 1487-1] libtirpc security update mailing-list third-party-advisory
- USN-3759-1 third-party-advisory vendor-advisory
- USN-3759-2 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking