CVE-2017-8779: libtirpc_project libtirpc
Vulnerability summary
CVE-2017-8779 is a high (CVSS 7.8) vulnerability in libtirpc_project libtirpc. EPSS estimates a 81.23% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 04-05-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
81.23%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 81.23% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundRPCBind / libtirpc - Denial of Service
Maturity: poc
RPC DoS targeting *nix rpcbind/libtirpc
auxiliary/dos/rpc/rpcbomb
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat51 products
- calamari-server< 0:1.5.6-2.el7cp
- ceph< 1:10.2.7-27.el7cp
- ceph-base< 1:10.2.7-27.el7cp
- ceph-common< 1:10.2.7-27.el7cp
- ceph-fuse< 1:10.2.7-27.el7cp
Suse27 products
- libtirpc&distro=SUSE Linux Enterprise Desktop 12 SP1< 0.2.3-13.3.1
- libtirpc&distro=SUSE Linux Enterprise Desktop 12 SP2< 1.0.1-16.1
- libtirpc&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 0.2.1-1.12.3
- libtirpc&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 0.2.1-1.12.3
- libtirpc&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 0.2.1-1.12.3
Debian3 products
- libtirpc< 0.2.5-1.2 | < 0.2.5-1+deb8u1 | < 0.2.2-5+deb7u1
- ntirpc< 1.4.4-1
- rpcbind< 0.2.3-0.6 | < 0.2.1-6+deb8u2 | < 0.2.0-8+deb7u2
Ubuntu3 products
- libtirpc< 0.2.2-5ubuntu2.1 | < 0.2.5-1ubuntu0.1
- ntirpcAll versions (No fix recorded)
- rpcbind< 0.2.3-0.6ubuntu0.18.04.2 | < 0.2.1-2ubuntu2.2+esm1 | < 0.2.3-0.2ubuntu0.16.04.1+esm1
Mageia2 products
- libtirpc< 0.2.5-3.2.mga5
- rpcbind< 0.2.2-1.2.mga5
Alpine1 product
- rpcbind< 0.2.4-r0
Libtirpc_project1 product
- libtirpc≤ 1.0.1
Ntirpc_project1 product
- ntirpc≤ 1.4.3
Opensuse1 product
- rpcbind&distro=openSUSE Tumbleweed< 1.2.6-2.2
Rpcbind_project1 product
- rpcbind≤ 0.2.4
10 vendors · 91 products
References
117 links- guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/X Refsource MISCThird Party AdvisoryREPORT
- security.netapp.com/advisory/ntap-20180109-0001/X Refsource CONFIRM
Show all 100 references
- openwall.com/lists/oss-security/2017/05/03/12X Refsource MISCMailing ListPatchThird Party AdvisoryREPORT
- openwall.com/lists/oss-security/2017/05/04/1X Refsource MISCMailing ListPatchThird Party AdvisoryREPORT
Showing 100 of 117. Use Open JSON for the complete list.