Arch Linux alert ASA-201705-5 (libtirpc)
From: | Levente Polyak <anthraxx@archlinux.org> | |
To: | arch-security@archlinux.org | |
Subject: | [arch-security] [ASA-201705-5] libtirpc: denial of service | |
Date: | Wed, 10 May 2017 18:18:43 +0200 | |
Message-ID: | <43d42744-d405-db46-d5f0-70d85e99d9ca@archlinux.org> |
Arch Linux Security Advisory ASA-201705-5 ========================================= Severity: Medium Date : 2017-05-07 CVE-ID : CVE-2017-8779 Package : libtirpc Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-262 Summary ======= The package libtirpc before version 1.0.1-3 is vulnerable to denial of service. Resolution ========== Upgrade to 1.0.1-3. # pacman -Syu "libtirpc>=1.0.1-3" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== It was found that libtirpc and libntirpc fails to free a buffer allocated for parsing XDR blocks when parsing fails due to insufficient input data being available. A specially crafted message sent to a service such as rpcbind results in a memory leak, causing the application to crash or other processes to be impacted via the OOM killer. Impact ====== A remote attacker is able to send specially crafted input to leak memory, possibly leading to denial of service. References ========== https://bugs.archlinux.org/task/53928 https://guidovranken.wordpress.com/2017/05/03/rpcbomb-rem... https://security.archlinux.org/CVE-2017-8779