NetSight
IP …
medium4.3Public exploit code

CVE-2013-1950

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with craft…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.

Affected products

VendorProductAffected versions
Libtirpc ProjectLibtirpc
through 0.2.3
Versions 0.1.8, 0.1.9, 0.1.10, 0.1.11, 0.2.0

Weakness classification

CWE-399

References