vulnerability

FreeBSD: VID-0e5d6969-600a-11e6-a6c3-14dae9d210b8 (CVE-2015-7236): FreeBSD -- rpcbind(8) remote denial of service [REVISED]

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Aug 11, 2016
Added
Dec 10, 2025
Modified
Dec 10, 2025

Description

Problem Description: In rpcbind(8), netbuf structures are copied directly, which would result in two netbuf structures that reference to one shared address buffer. When one of the two netbuf structures is freed, access to the other netbuf structure would result in an undefined result that may crash the rpcbind(8) daemon. Impact: A remote attacker who can send specifically crafted packets to the rpcbind(8) daemon can cause it to crash, resulting in a denial of service condition.

Solutions

freebsd-upgrade-base-10_2-release-p5freebsd-upgrade-base-10_1-release-p22freebsd-upgrade-base-9_3-release-p28
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.