USN-4986-4
USN-4986-4 · rpcbind regression
This page contains facts from public vulnerability sources. Check the original advisory before updating.
USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
rpcbind Ubuntu:Pro:14.04:LTS
- Versions
- 0.2.0-8.2ubuntu2
- 0.2.1-2ubuntu1
- 0.2.1-2ubuntu2.1
- 0.2.1-2ubuntu2.2
- 0.2.1-2ubuntu2.2+esm1
- Affected ranges
- ECOSYSTEM: < 0.2.1-2ubuntu2.2+esm2
Update to 0.2.1-2ubuntu2.2+esm2
rpcbind Ubuntu:Pro:16.04:LTS
- Versions
- 0.2.1-6ubuntu4
- 0.2.3-0.2
- 0.2.3-0.2ubuntu0.1
- 0.2.3-0.2ubuntu0.16.04.1
- 0.2.3-0.2ubuntu0.16.04.1+esm1
- Affected ranges
- ECOSYSTEM: < 0.2.3-0.2ubuntu0.16.04.1+esm2
Update to 0.2.3-0.2ubuntu0.16.04.1+esm2