In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtirpc-develUpgrade libtirpc | Nov 18, 2022 | Jul 20, 2022 |
| Alpine Linux | — | Upgrade libtirpc | Mar 26, 2024 | Jul 20, 2022 |
| Amazon_linux_2023 | — | Upgrade libtirpc-debugsourceUpgrade libtirpcUpgrade libtirpc-debuginfoUpgrade libtirpc-devel | Mar 10, 2025 | Jul 20, 2022 |
| Centos_linux | — | Upgrade libtirpc-debugsourceUpgrade libtirpcUpgrade libtirpc-debuginfo | Nov 16, 2022 | Jul 20, 2022 |
| Debian | — | Upgrade libtirpc | Aug 17, 2022 | Jul 20, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade net-libs/libtirpc. | Oct 31, 2022 | Jul 20, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtirpc | Nov 3, 2022 | Jul 20, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libtirpc-develUpgrade libtirpc | Oct 11, 2022 | Jul 20, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libtirpc | Sep 14, 2022 | Jul 20, 2022 |
| Oracle_linux | — | Upgrade libtirpcUpgrade libtirpc-devel | Nov 22, 2022 | Jul 20, 2022 |
| Redhat_linux | — | Upgrade libtirpc-debuginfoUpgrade libtirpc-debugsourceUpgrade libtirpc-develNo solution existsUpgrade libtirpc | Nov 16, 2022 | Jul 20, 2022 |
| Rocky_linux | — | Upgrade libtirpcUpgrade libtirpc-debugsourceUpgrade libtirpc-debuginfoUpgrade libtirpc-devel | Mar 12, 2024 | Jul 20, 2022 |
| Suse | — | Upgrade libtirpc3Upgrade libtirpc3-32bitUpgrade libtirpc-develUpgrade libtirpc-netconfig | Oct 26, 2022 | Jul 20, 2022 |
| Ubuntu | — | Upgrade libtirpc3 | Mar 22, 2023 | Jul 20, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub