Unscored severity · published Jul 9, 2013
CVE-2013-1950
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that…
–
CVSS
6.5%
EPSS
No
On KEV
Description
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libtirpc · Libtirpc Project
through 0.2.3; 0.1.8; 0.1.9; 0.1.10; 0.1.11; 0.2.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1950
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1950
git.infradead.org
http://git.infradead.org/users/steved/libtirpc.git/commitdiff/a9f437119d79a438cb12e510f3cadd4060102c9f
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0884.html
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=948378
More from Libtirpc
7.5
CVE-2021-46828
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled
7.5
CVE-2018-14622
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3
7.5
CVE-2018-14621
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2
7.5
CVE-2017-8779
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR…