Debian/rpcbind: high 7.5
Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP
Action: Upgrade rpcbind to 0.2.1-6.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1-6.1 | - |
Fixed versions
| 0.2.1-6.1 |
Sources
- osv: DEBIAN-CVE-2015-7236#Debian:14/rpcbind
- https://security-tracker.debian.org/tracker/CVE-2015-7236
published · modified · JSON