REDHAT-BUG-1448124: High severity rpcbind vulnerability
Rpcbind does not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
References:
http://seclists.org/oss-sec/2017/q2/209 https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1448124?
The severity of REDHAT-BUG-1448124 is critical due to its potential to cause a denial of service.
How do I fix REDHAT-BUG-1448124?
To fix REDHAT-BUG-1448124, update to the latest patched version of rpcbind provided by your operating system vendor.
What causes the vulnerability in REDHAT-BUG-1448124?
The vulnerability in REDHAT-BUG-1448124 is caused by rpcbind not considering the maximum RPC data size during memory allocation.
Who can exploit the vulnerability in REDHAT-BUG-1448124?
Remote attackers can exploit the vulnerability in REDHAT-BUG-1448124 by sending crafted UDP packets to port 111.
What are the consequences of not addressing REDHAT-BUG-1448124?
Not addressing REDHAT-BUG-1448124 can lead to system memory exhaustion and potential denial of service.