Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3791-1

Опубликовано: 27 окт. 2022
Источник: suse-cvrf

Описание

Security update for libtirpc

This update for libtirpc fixes the following issues:

  • CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680).

  • Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)

Список пакетов

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-Basic-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-HPC-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-HPC-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-SAP-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-SAP-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-Azure-Standard-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-EC2-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-EC2-ECS-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-EC2-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-EC2-SAP-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-EC2-SAP-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-GCE-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-GCE-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-GCE-SAP-BYOS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-GCE-SAP-On-Demand
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
SUSE Linux Enterprise Server 12 SP2-BCL
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE Linux Enterprise Server 12 SP3-BCL
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE Linux Enterprise Server 12 SP5
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libtirpc-devel-1.0.1-17.24.1
SUSE OpenStack Cloud 9
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1
SUSE OpenStack Cloud Crowbar 9
libtirpc-netconfig-1.0.1-17.24.1
libtirpc3-1.0.1-17.24.1
libtirpc3-32bit-1.0.1-17.24.1

Ссылки

Описание

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtirpc-netconfig-1.0.1-17.24.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtirpc3-1.0.1-17.24.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtirpc-netconfig-1.0.1-17.24.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtirpc3-1.0.1-17.24.1
Ссылки