libtirpc project records
5 published records for vendor libtirpc project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 20%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-252 Unchecked Return Value1
- CWE-399 Resource Management Errors1
- CWE-755 Improper Handling of Exceptional Conditions1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2017-8779Weaponized | rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data rpcbind project · rpcbind · CWE-770 | High7.5 | — | 81.2% | May 4, 2017 |
31Monitor | CVE-2018-14622No exploit | A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3.libtirpc project · libtirpc · CWE-252 | High7.5 | — | 3.8% | Aug 30, 2018 |
31Monitor | CVE-2021-46828No exploit | In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connectionlibtirpc project · libtirpc · CWE-755 | High7.5 | — | 3.2% | Jul 20, 2022 |
31Monitor | CVE-2018-14621No exploit | An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2.libtirpc project · libtirpc · CWE-835 | High7.5 | — | 2.2% | Aug 30, 2018 |
19Monitor | CVE-2013-1950Proof of concept | The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPClibtirpc project · libtirpc · CWE-399 | Medium4.3 | — | 6.4% | Jul 9, 2013 |
- CVE-2017-877960This week
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data
HighCVSS 7.5WeaponizedEPSS 81%rpcbind project · rpcbindMay 4, 2017
- CVE-2018-1462231Monitor
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3.
HighCVSS 7.5No exploitEPSS 3%libtirpc project · libtirpcAug 30, 2018
- CVE-2021-4682831Monitor
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connection
HighCVSS 7.5No exploitEPSS 3%libtirpc project · libtirpcJul 20, 2022
- CVE-2018-1462131Monitor
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2.
HighCVSS 7.5No exploitEPSS 2%libtirpc project · libtirpcAug 30, 2018
- CVE-2013-195019Monitor
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC
MediumCVSS 4.3Proof of conceptEPSS 6%libtirpc project · libtirpcJul 9, 2013