libtirpc: denial of service [LWN.net]

Package(s):

libtirpc

CVE #(s):

CVE-2013-1950

Created:

May 31, 2013

Updated:

June 5, 2013

Description:

From the Red Hat advisory:

A flaw was found in the way libtirpc decoded RPC requests. A specially-crafted RPC request could cause libtirpc to attempt to free a buffer provided by an application using the library, even when the buffer was not dynamically allocated. This could cause an application using libtirpc, such as rpcbind, to crash. (CVE-2013-1950)

Alerts:

Red Hat	RHSA-2013:0884-01	2013-05-30
CentOS	CESA-2013:0884	2013-05-30
Oracle	ELSA-2013-0884	2013-05-30
Scientific Linux	SL-libt-20130530	2013-05-30

(Log in to post comments)