CVE-2018-14622: Null Pointer Dereference
A flaw was found in libtirpc. The return value of makefdxprt was used without checking for NULL in svcvc.c, leading to a null pointer dereference / segfault if the maximum number of available file descriptors was exhausted.
References: https://bugzilla.novell.com/showbug.cgi?id=968175
Upstream Patch: http://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=1c77f7a869bdea2a34799d774460d1f9983d45f0
Other sources
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefdxprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-14622?
CVE-2018-14622 has a moderate severity level due to its potential to cause a null pointer dereference leading to application crashes.
How do I fix CVE-2018-14622?
To fix CVE-2018-14622, update the libtirpc package to version 0.3.4 or later for Red Hat systems and to 1.3.1-1+deb11u1 or later for Debian systems.
Which software is affected by CVE-2018-14622?
CVE-2018-14622 affects the libtirpc package across various versions of Red Hat, Debian, and Ubuntu operating systems.
Is CVE-2018-14622 exploitable on all systems?
CVE-2018-14622 is exploitable on systems where the maximum number of available file descriptors is exhausted, leading to a null pointer dereference.
What is the impact of CVE-2018-14622?
The impact of CVE-2018-14622 includes potential application crashes due to segmentation faults resulting from null pointer dereferences.