|
|
Subscribe / Log in / New account

Arch Linux alert ASA-201705-5 (libtirpc)

From:  Levente Polyak <anthraxx@archlinux.org>
To:  arch-security@archlinux.org
Subject:  [arch-security] [ASA-201705-5] libtirpc: denial of service
Date:  Wed, 10 May 2017 18:18:43 +0200
Message-ID:  <43d42744-d405-db46-d5f0-70d85e99d9ca@archlinux.org>

Arch Linux Security Advisory ASA-201705-5 ========================================= Severity: Medium Date : 2017-05-07 CVE-ID : CVE-2017-8779 Package : libtirpc Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-262 Summary ======= The package libtirpc before version 1.0.1-3 is vulnerable to denial of service. Resolution ========== Upgrade to 1.0.1-3. # pacman -Syu "libtirpc>=1.0.1-3" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== It was found that libtirpc and libntirpc fails to free a buffer allocated for parsing XDR blocks when parsing fails due to insufficient input data being available. A specially crafted message sent to a service such as rpcbind results in a memory leak, causing the application to crash or other processes to be impacted via the OOM killer. Impact ====== A remote attacker is able to send specially crafted input to leak memory, possibly leading to denial of service. References ========== https://bugs.archlinux.org/task/53928 https://guidovranken.wordpress.com/2017/05/03/rpcbomb-rem... https://security.archlinux.org/CVE-2017-8779


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds