Vulnerability in libtirpc - Security Update
Summary
DLA-936-1: libtirpc - security update. Affects libtirpc versions < 0.2.2-5+deb7u1. Fixed in 0.2.2-5+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libtirpc is a transport-independent RPC library used by rpcbind and other programs. It provides a means for programs to call procedures in other programs located on remote machines. This vulnerability in libtirpc may result in denial of service through memory exhaustion, depending on memory management settings.
Vulnerability Detail
The vulnerability in libtirpc is due to incorrect memory management. This can be exploited to exhaust memory, leading to a denial of service condition. The issue was discovered by Guido Vranken. It is important to note that the impact of this vulnerability depends on the memory management settings of the system.
How To Fix
Minimum fixed version
0.2.2-5+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libtirpcTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the vulnerability in libtirpc can lead to denial of service through memory exhaustion. It is important to upgrade the libtirpc package to the fixed version to mitigate this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libtirpc →
FAQ
libtirpc is a transport-independent RPC library used by rpcbind and other programs. It allows programs to call procedures in other programs located on remote machines.
The vulnerability in libtirpc can result in denial of service through memory exhaustion, depending on memory management settings.
This vulnerability was discovered by Guido Vranken.
To fix this vulnerability, it is recommended to upgrade the libtirpc package to version 0.2.2-5+deb7u1 or later.
More information about Debian LTS security advisories, including how to apply updates and frequently asked questions, can be found at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for libtirpc.
