CVE-2021-46828
Published Jul 20, 2022In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, le…
Vendor/product archive
libtirpc_project / libtirpc CVEs
Beta · best-effort5 CVEs tagged to libtirpc_project / libtirpc — 0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2018-14622
Published Aug 30, 2018A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a…
CVE-2018-14621
Published Aug 30, 2018An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the serve…
CVE-2017-8779
Published May 4, 2017rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR s…
CVE-2013-1950
Published Jul 9, 2013The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that tr…
Showing 1-5 of 5 CVEsPage 1 of 1