Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-46828

Опубликовано: 20 июл. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libtirpc_project:libtirpc:*:*:*:*:*:*:*:*
Версия до 1.3.3 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01199
Низкий

7.5 High

CVSS3

Дефекты

CWE-755
CWE-755

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

CVSS3: 7.5
redhat
больше 3 лет назад

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

CVSS3: 7.5
msrc
больше 3 лет назад

In libtirpc before 1.3.3rc1 remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can in turn lead to an svc_run infinite loop without accepting new connections.

CVSS3: 7.5
debian
больше 3 лет назад

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file d ...

suse-cvrf
около 3 лет назад

Security update for libtirpc

EPSS

Процентиль: 78%
0.01199
Низкий

7.5 High

CVSS3

Дефекты

CWE-755
CWE-755