p PatchFirst

CVE-2010-2061

CVE-2010-2061

This page contains facts from public vulnerability sources. Check the original advisory before updating.

rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started.

CVSS 7.8 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • rpcbind

    Versions
    • 0.2.0: Affected

    No fix published

  • rpcbind Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.2.0-4.1

    Update to 0.2.0-4.1

  • rpcbind Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.2.0-4.1

    Update to 0.2.0-4.1

  • rpcbind Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.2.0-4.1

    Update to 0.2.0-4.1

Original sources

Check your server →