libtirpc 'svc_getargs()' Function Denial of Service Vulnerability

Bugtraq ID:	59365
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-1950
Remote:	Yes
Local:	No
Published:	Apr 22 2013 12:00AM
Updated:	Apr 13 2015 08:44PM
Credit:	Reported by the vendor
Vulnerable:	Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 CentOS CentOS 6 Avaya Aura Experience Portal 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700
Not Vulnerable:

libtirpc 'svc_getargs()' Function Denial of Service Vulnerability

libtirpc is prone to a denial-of-service vulnerability.

Attackers may leverage this issue to crash the affected application, denying service to legitimate users.

libtirpc 'svc_getargs()' Function Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/59365.rb

libtirpc 'svc_getargs()' Function Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libtirpc 'svc_getargs()' Function Denial of Service Vulnerability

References: