Approved changes feed: RSS · Atom

cpe:2.3:a:[unknown]:libtirpc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor[Unknown] (5b07108a-8f0c-5d28-ab99-c4ff62adb460)
ProductLibtirpc (9161307e-7bf7-5012-a23e-bdbe5d7bd921)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14622 vulnerable 2026-06-03 14:38:12.276476 Details available
MEDIUM (5.3)
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.
Published: 2018-08-30T13:00:00.000Z
Updated: 2024-08-05T09:29:51.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14621 vulnerable 2026-06-03 14:38:12.274411 Details available
MEDIUM (5.3)
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted.
Published: 2018-08-30T13:00:00.000Z
Updated: 2024-08-05T09:29:51.860Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.