CVE-2015-7236: Use After Free
First published: Thu Oct 01 2015(Updated: )
Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.
Credit: meissner@suse.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun RPCBind | <=0.2.1 | |
| Ubuntu Linux | =12.04 | |
| Ubuntu Linux | =14.04 | |
| Ubuntu Linux | =15.04 | |
| Debian GNU/Linux | =7.0 | |
| Oracle Solaris SPARC | =10 | |
| Oracle Solaris SPARC | =11.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171030.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172152.html
- http://www.debian.org/security/2015/dsa-3366
- http://www.openwall.com/lists/oss-security/2015/09/17/1
- http://www.openwall.com/lists/oss-security/2015/09/17/6
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/76771
- http://www.securitytracker.com/id/1033673
- http://www.spinics.net/lists/linux-nfs/msg53045.html
- http://www.ubuntu.com/usn/USN-2756-1
- https://security.FreeBSD.org/advisories/FreeBSD-SA-15:24.rpcbind.asc
- https://security.gentoo.org/glsa/201611-17
Frequently Asked Questions
What is the severity of CVE-2015-7236?
CVE-2015-7236 has a high severity rating due to its ability to cause a denial of service through daemon crashes.
How do I fix CVE-2015-7236?
To fix CVE-2015-7236, update rpcbind to version 0.2.2 or later, as this version addresses the vulnerability.
Which systems are affected by CVE-2015-7236?
CVE-2015-7236 affects rpcbind versions up to 0.2.1 and various distributions of Ubuntu, Debian, and Oracle Solaris.
What type of vulnerability is CVE-2015-7236?
CVE-2015-7236 is classified as a use-after-free vulnerability in the rpcbind service.
Can CVE-2015-7236 be exploited remotely?
Yes, CVE-2015-7236 can be exploited remotely by attackers sending crafted packets to the rpcbind service.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/rpcbind project
- canonical/sun rpcbind
- version/sun rpcbind/0.2.1
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/12.04
- version/ubuntu linux/14.04
- version/ubuntu linux/15.04
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/7.0
- vendor/oracle
- canonical/oracle solaris sparc
- version/oracle solaris sparc/10
- version/oracle solaris sparc/11.3