DEBIAN-CVE-2018-14622

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2018-14622
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2018-14622.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2018-14622
Upstream
Published
2018-08-30T13:29:00Z
Modified
2025-09-19T06:17:44Z
Summary
[none]
Details

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.

References

Affected packages

Debian:11 / libtirpc

Package

Name
libtirpc
Purl
pkg:deb/debian/libtirpc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.5-1.3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / libtirpc

Package

Name
libtirpc
Purl
pkg:deb/debian/libtirpc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.5-1.3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / libtirpc

Package

Name
libtirpc
Purl
pkg:deb/debian/libtirpc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.5-1.3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / libtirpc

Package

Name
libtirpc
Purl
pkg:deb/debian/libtirpc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.5-1.3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}