Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-46828 →

DEBIAN-CVE-2021-46828

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mish...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libtirpc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.1"}]}]

Debian:13 libtirpc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.1"}]}]

Debian:14 libtirpc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.1"}]}]

Références

advisory security-tracker.debian.org