CVEvulnerability

CVE-2013-1950

4.3 MEDIUM Published 2013-07-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.

Affected configurations

• libtirpc project libtirpc (<= 0.2.3) • libtirpc project libtirpc 0.1.8 • libtirpc project libtirpc 0.1.9 • libtirpc project libtirpc 0.1.10 • libtirpc project libtirpc 0.1.11 • libtirpc project libtirpc 0.2.0 • libtirpc project libtirpc 0.2.1 • libtirpc project libtirpc 0.2.2

Related

Weakness · not in database (1)

References