The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade system/library to version 0.5.11-0.175.3.24.0.3.0 on Solaris 11.3 | Nov 30, 2017 | May 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 8, 2017 |
| Suse | — | Upgrade glibc-i18ndataUpgrade glibc-profile-x86Upgrade glibc-develUpgrade glibc-locale-x86Upgrade glibc-devel-32bitUpgrade glibc-devel-staticUpgrade glibc-localeUpgrade glibcUpgrade glibc-htmlUpgrade glibc-x86Upgrade nscdUpgrade glibc-locale-32bitUpgrade glibc-infoUpgrade glibc-profileUpgrade glibc-profile-32bitUpgrade glibc-32bit | Feb 16, 2018 | May 7, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub