CVE-2013-1950
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a...
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
Exploit likelihood
What each source reports
NVD Score used
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
- Record
CVE-2013-1950- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
- Record
CVE-2013-1950- Updated
- 2026-11-02
EUVDEUVD-2013-1940 No score
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
- Record
EUVD-2013-1940- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g29-qg3g-jfjm No score
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a...
The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.
- Record
GHSA-6g29-qg3g-jfjm- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtirpcRed Hat:enterprise_linux:6::client |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-develRed Hat:enterprise_linux:6::client |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpcRed Hat:enterprise_linux:6::computenode |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-develRed Hat:enterprise_linux:6::computenode |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpcRed Hat:enterprise_linux:6::server |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-develRed Hat:enterprise_linux:6::server |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpcRed Hat:enterprise_linux:6::workstation |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
libtirpc-develRed Hat:enterprise_linux:6::workstation |
before 0:0.2.1-6.el6_4 | 0:0.2.1-6.el6_4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | rpcbind - CALLIT procedure UDP Crash (PoC) | 2013-07-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1950 is a medium vulnerability (CVSS 4.3) in Libtirpc Project Libtirpc, published July 9, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.46%, the 93rd percentile. Fixed in libtirpc 0:0.2.1-6.el6_4.