p PatchFirst

CVE-2002-0391

CVE-2002-0391

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

CVSS 9.8 · Critical · EPSS 58.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • acm Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.0-10

    Update to 5.0-10

  • acm Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.0-10

    Update to 5.0-10

  • dietlibc Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.20-0cvs20020808

    Update to 0.20-0cvs20020808

  • dietlibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.20-0cvs20020808

    Update to 0.20-0cvs20020808

  • dietlibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.20-0cvs20020808

    Update to 0.20-0cvs20020808

  • glibc Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.5-13

    Update to 2.2.5-13

  • glibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.2.5-13

    Update to 2.2.5-13

  • glibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.2.5-13

    Update to 2.2.5-13

  • krb5 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.5-2

    Update to 1.2.5-2

  • krb5 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.5-2

    Update to 1.2.5-2

  • krb5 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.5-2

    Update to 1.2.5-2

  • openafs Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.6-1

    Update to 1.2.6-1

  • openafs Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.6-1

    Update to 1.2.6-1

Original sources

Check your server →