VDB
BDU%3A2021-05819
BDU%3A2021-05819
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость сервера динамического назначения RPC-портов RPCbind, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Fedora Project, Canonical Ltd., Сообщество свободного программного обеспечения, Novell Inc., АО «ИВК», АО «Концерн ВНИИНС» | Red Hat Enterprise Linux, Fedora, Ubuntu, Debian GNU/Linux, OpenSUSE Leap, Red Hat Ceph Storage, ALT Linux, libtirpc, rpcbind, ntirpc, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) | |
| Red Hat, Inc., Fedora Project, Canonical Ltd., Сообщество свободного программного обеспечения, Novell Inc., АО «ИВК», АО «Концерн ВНИИНС», ООО «КНС ГРУПП» | Red Hat Enterprise Linux, Fedora, Ubuntu, Debian GNU/Linux, OpenSUSE Leap, Red Hat Ceph Storage, ALT Linux, libtirpc, rpcbind, ntirpc, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177), Татлин-Юнифайд |
Timeline
- Dec 7, 2021 CVE Published
- Aug 10, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://ubuntu.com/security/notices/USN-3759-1 advisory
- https://ubuntu.com/security/notices/USN-3759-2 advisory
- https://ubuntu.com/security/notices/USN-4986-1 advisory
- https://ubuntu.com/security/notices/USN-4986-2 advisory
- https://www.debian.org/security/2017/dsa-3845 advisory
- https://access.redhat.com/security/cve/cve-2017-8779 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1448124 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DEIBRBJE677HANIUQFDRJHIJYPJRZQYG/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TUCEBTW7ECONUSKYSVN4W7NE5LVZMWZU/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5BLP6HQSEBKCL4CLJ76DM4R3WF6A6SDR/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J5444OAGCXI7PXUGZ65GTCPD6BQBPYH6/ advisory
- https://github.com/drbothen/GO-RPCBOMB advisory
- https://www.openwall.com/lists/oss-security/2017/05/04/1 url
- https://www.exploit-db.com/exploits/41974 url
- https://cve.basealt.ru/tag/cve-2017-8779.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00071.html advisory
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- http://git.linux-nfs.org/?p=steved/rpcbind.git advisory
- https://github.com/guidovranken/rpcbomb advisory