Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:1706-1

Опубликовано: 18 сент. 2015
Источник: suse-cvrf

Описание

Security update for rpcbind

A use-after-free security bug in rpcbind was fixed which could lead to a remote denial of service.

Список пакетов

SUSE Linux Enterprise Desktop 11 SP3
rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Desktop 11 SP4
rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server 11 SP3
rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server 11 SP4
rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3
rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
rpcbind-0.1.6+git20080930-6.24.1

Ссылки

Описание

Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Desktop 11 SP4:rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server 11 SP3-TERADATA:rpcbind-0.1.6+git20080930-6.24.1
SUSE Linux Enterprise Server 11 SP3:rpcbind-0.1.6+git20080930-6.24.1
Ссылки