GLSA-201611-17 : RPCBind: Denial of Service
Medium Nessus Plugin ID 95268
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-201611-17 (RPCBind: Denial of Service)
A use-after-free vulnerability was discovered in RPCBind’s svc_dodestroy function when trying to free a corrupted xprt->xp_netid pointer.
A remote attacker could possibly cause a Denial of Service condition.
There is no known workaround at this time.
SolutionAll RPCBind users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-nds/rpcbind-0.2.3-r1'