Published: 30/08/2018 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 7.0
debian debian linux 8.0
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
redhat enterprise linux server aus 7.4
canonical ubuntu linux 18.04
redhat enterprise linux server eus 7.4
redhat enterprise linux server eus 7.5
redhat enterprise linux workstation 7.0
redhat enterprise linux desktop 7.0
redhat enterprise linux server eus 7.6
libtirpc project libtirpc

Debian Bug report logs - #907608 libtirpc: CVE-2018-14622: Segmentation fault in makefd_xprt return value in svc_vcc Package: src:libtirpc; Maintainer for src:libtirpc is Anibal Monsalve Salazar <anibal@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 30 Aug 2018 07:21:02 UTC Severity: i ...

Several security issues were fixed in libtirpc ...

A null-pointer dereference vulnerability was found in libtirpc before version 033-rc3 The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors A remote attacker could cause an rpc-based application to crash by flooding it with new c ...

CWE-252 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14622 https://bugzilla.novell.com/show_bug.cgi?id=968175 https://access.redhat.com/errata/RHBA-2017:1991 https://lists.debian.org/debian-lts-announce/2018/08/msg00034.html https://usn.ubuntu.com/3759-2/https://usn.ubuntu.com/3759-1/http://git.linux-nfs.org/?p=steved/libtirpc.git%3Ba=commit%3Bh=1c77f7a869bdea2a34799d774460d1f9983d45f0 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907608 https://nvd.nist.gov https://usn.ubuntu.com/3759-1/

CVE-2018-14622

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect