Every CVE Search/ Get API key

CVE-2017-8779

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through...

7.5 HighPublic exploitFix available

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

81.2%Up 12.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
CVE-2017-8779
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-770
Updated
2026-11-02
CVE List No score

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
CVE-2017-8779
Updated
2026-11-02
EUVDEUVD-2017-17723 No score

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
EUVD-2017-17723
Updated
2026-11-03
GitHub AdvisoriesGHSA-fr7x-wc8q-h255 7.5

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through...

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
GHSA-fr7x-wc8q-h255
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2017-8779 7.5

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
ALPINE-CVE-2017-8779
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2017-8779 7.5

CVE-2017-8779 does not affect BellSoft software

Record
BELL-CVE-2017-8779
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 19 moreShow less
OSV 7.5

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
CVE-2017-8779
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-8779 7.5

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
DEBIAN-CVE-2017-8779
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHBA-2017:1497 7.5

Red Hat Bug Fix Advisory: Red Hat Ceph Storage 2.3 bug fix and enhancement update

Record
RHBA-2017:1497
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:1262 7.5

Red Hat Security Advisory: rpcbind security update

Record
RHSA-2017:1262
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:1263 7.5

Red Hat Security Advisory: libtirpc security update

Record
RHSA-2017:1263
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:1267 7.5

Red Hat Security Advisory: rpcbind security update

Record
RHSA-2017:1267
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:1268 7.5

Red Hat Security Advisory: libtirpc security update

Record
RHSA-2017:1268
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:1395 7.5

Red Hat Security Advisory: libntirpc security update

Record
RHSA-2017:1395
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-8779 7.5

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

Record
UBUNTU-CVE-2017-8779
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2017-0183 No score

Updated rpcbind/libtirpc packages fix security vulnerability

It was discovered that rpcbind and libtirpc contain a vulnerability that allows an attacker to allocate any amount of bytes (up to 4 gigabytes per attack) on a remote rpcbind host, and the memory is never freed unless the process crashes or the administrator halts or restarts the rpcbind service. This can slow down the system’s operations significantly or prevent other services from spawning processes entirely (CVE-2017-8779).

Record
MGASA-2017-0183
Updated
2026-11-02
OSVopenSUSE-SU-2024:11304-1 No score

rpcbind-1.2.6-2.2 on GA media

These are all security issues fixed in the rpcbind-1.2.6-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11304-1
Updated
2026-11-02
OSVSUSE-SU-2017:1306-1 No score

Security update for libtirpc

This update for libtirpc fixes the following issues:

  • CVE-2017-8779: crafted UDP packaged could lead rpcbind to denial-of-service (bsc#1037559)
Record
SUSE-SU-2017:1306-1
Updated
2026-11-02
OSVSUSE-SU-2017:1314-1 No score

Security update for libtirpc

This update for libtirpc fixes the following issues:

  • CVE-2017-8779: crafted UDP packaged could lead rpcbind to denial-of-service (bsc#1037559)
Record
SUSE-SU-2017:1314-1
Updated
2026-11-02
OSVSUSE-SU-2017:1328-1 No score

Security update for rpcbind

This update for rpcbind fixes the following issues:

  • CVE-2017-8779: A crafted UDP package could lead rcpbind to remote denial-of-service (bsc#1037559)
Record
SUSE-SU-2017:1328-1
Updated
2026-11-02
OSVSUSE-SU-2017:1336-1 No score

Security update for rpcbind

This update for rpcbind fixes the following issues:

  • CVE-2017-8779: A crafted UDP package could lead rcpbind to remote denial-of-service (bsc#1037559)
Record
SUSE-SU-2017:1336-1
Updated
2026-11-02
OSVSUSE-SU-2017:1468-1 No score

Security update for libtirpc, rpcbind

This update for libtirpc and rpcbind fixes the following issues:

  • CVE-2017-8779: A crafted UDP package could lead rpcbind to remote denial-of-service. (bsc#1037559)
Record
SUSE-SU-2017:1468-1
Updated
2026-11-02
OSVUSN-3759-1 No score

libtirpc vulnerabilities

Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-4429)

It was discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14622)

It was discovered that libtirpc incorrectly handled certain strings. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-8779)

Record
USN-3759-1
Updated
2026-11-02
OSVUSN-4986-1 No score

rpcbind vulnerability

It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.

Record
USN-4986-1
Updated
2026-11-02
OSVUSN-4986-2 No score

rpcbind vulnerability

USN-4986-1 fixed a vulnerability in rpcbind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.

Record
USN-4986-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rpcbind
Alpine:v3.10
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.11
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.12
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.13
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.14
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.15
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.16
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.17
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.18
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.19
 before 0.2.4-r0
0.2.4-r0
Show 149 moreShow less
Affected packages
PackageAffectedFixed
rpcbind
Alpine:v3.20
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.21
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.22
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.23
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.24
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.7
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.8
 before 0.2.4-r0
0.2.4-r0
rpcbind
Alpine:v3.9
 before 0.2.4-r0
0.2.4-r0
libtirpc
Debian:12
 before 0.2.5-1.2
0.2.5-1.2
libtirpc
Debian:13
 before 0.2.5-1.2
0.2.5-1.2
libtirpc
Debian:14
 before 0.2.5-1.2
0.2.5-1.2
ntirpc
Debian:12
 before 1.4.4-1
1.4.4-1
ntirpc
Debian:13
 before 1.4.4-1
1.4.4-1
ntirpc
Debian:14
 before 1.4.4-1
1.4.4-1
rpcbind
Debian:12
 before 0.2.3-0.6
0.2.3-0.6
rpcbind
Debian:13
 before 0.2.3-0.6
0.2.3-0.6
rpcbind
Debian:14
 before 0.2.3-0.6
0.2.3-0.6
libtirpc
Debian:7
 before 0.2.2-5+deb7u1, plus listed versions
0.2.2-5
0.2.2-5+deb7u1
rpcbind
Debian:7
 before 0.2.0-8+deb7u2, plus listed versions
0.2.0-80.2.0-8+deb7u1
0.2.0-8+deb7u2
libtirpc
Debian:8
 before 0.2.5-1+deb8u1, plus listed versions
0.2.5-1
0.2.5-1+deb8u1
rpcbind
Debian:8
 before 0.2.1-6+deb8u2, plus listed versions
0.2.1-60.2.1-6+deb8u1
0.2.1-6+deb8u2
rpcbind
Mageia:5
 before 0.2.2-1.2.mga5
0.2.2-1.2.mga5
libtirpc
Mageia:5
 before 0.2.5-3.2.mga5
0.2.5-3.2.mga5
ceph
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-base
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-common
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-fuse
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-iscsi-cli
Red Hat:ceph_storage:2::el7
 before 0:2.0-5.el7cp
0:2.0-5.el7cp
ceph-iscsi-config
Red Hat:ceph_storage:2::el7
 before 0:2.0-4.el7cp
0:2.0-4.el7cp
ceph-iscsi-tools
Red Hat:ceph_storage:2::el7
 before 0:2.0-3.el7cp
0:2.0-3.el7cp
ceph-mds
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-radosgw
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-selinux
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
libcephfs1
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
libcephfs1-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
libntirpc
Red Hat:ceph_storage:2::el7
 before 0:1.4.3-2.el7
0:1.4.3-2.el7
libntirpc-debuginfo
Red Hat:ceph_storage:2::el7
 before 0:1.4.3-2.el7
0:1.4.3-2.el7
librados2
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
librados2-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
librbd1
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
librbd1-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
librgw2
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
librgw2-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
libtcmu
Red Hat:ceph_storage:2::el7
 before 0:1.2.1-0.2.20170104.git3d33566.el7cp
0:1.2.1-0.2.20170104.git3d33566.el7cp
nfs-ganesha
Red Hat:ceph_storage:2::el7
 before 0:2.4.5-7.el7cp
0:2.4.5-7.el7cp
nfs-ganesha-debuginfo
Red Hat:ceph_storage:2::el7
 before 0:2.4.5-7.el7cp
0:2.4.5-7.el7cp
nfs-ganesha-rgw
Red Hat:ceph_storage:2::el7
 before 0:2.4.5-7.el7cp
0:2.4.5-7.el7cp
pcp-pmda-lio
Red Hat:ceph_storage:2::el7
 before 0:1.0-2.el7cp
0:1.0-2.el7cp
python-cephfs
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
python-crypto
Red Hat:ceph_storage:2::el7
 before 0:2.6.1-1.2.el7cp
0:2.6.1-1.2.el7cp
python-crypto-debuginfo
Red Hat:ceph_storage:2::el7
 before 0:2.6.1-1.2.el7cp
0:2.6.1-1.2.el7cp
python-flask
Red Hat:ceph_storage:2::el7
 before 1:0.10.1-5.el7
1:0.10.1-5.el7
python-itsdangerous
Red Hat:ceph_storage:2::el7
 before 0:0.23-1.el7
0:0.23-1.el7
python-jinja2
Red Hat:ceph_storage:2::el7
 before 0:2.7.2-2.el7cp
0:2.7.2-2.el7cp
python-rados
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
python-rbd
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
python-rtslib
Red Hat:ceph_storage:2::el7
 before 0:2.1.fb64-0.1.20170301.git3637171.el7cp
0:2.1.fb64-0.1.20170301.git3637171.el7cp
python-werkzeug
Red Hat:ceph_storage:2::el7
 before 0:0.9.1-1.el7
0:0.9.1-1.el7
rbd-mirror
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
targetcli
Red Hat:ceph_storage:2::el7
 before 0:2.1.fb47-0.1.20170301.gitf632f38.el7cp
0:2.1.fb47-0.1.20170301.gitf632f38.el7cp
tcmu-runner
Red Hat:ceph_storage:2::el7
 before 0:1.2.1-0.2.20170104.git3d33566.el7cp
0:1.2.1-0.2.20170104.git3d33566.el7cp
tcmu-runner-debuginfo
Red Hat:ceph_storage:2::el7
 before 0:1.2.1-0.2.20170104.git3d33566.el7cp
0:1.2.1-0.2.20170104.git3d33566.el7cp
userspace-rcu
Red Hat:ceph_storage:2::el7
 before 0:0.7.16-1.el7cp
0:0.7.16-1.el7cp
userspace-rcu-debuginfo
Red Hat:ceph_storage:2::el7
 before 0:0.7.16-1.el7cp
0:0.7.16-1.el7cp
calamari-server
Red Hat:ceph_storage:2::el7
 before 0:1.5.6-2.el7cp
0:1.5.6-2.el7cp
ceph-mon
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-test
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
ceph-osd
Red Hat:ceph_storage:2::el7
 before 1:10.2.7-27.el7cp
1:10.2.7-27.el7cp
rpcbind
Red Hat:enterprise_linux:7::client
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind
Red Hat:enterprise_linux:7::computenode
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind
Red Hat:enterprise_linux:7::server
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind
Red Hat:enterprise_linux:7::workstation
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
rpcbind-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.2.0-38.el7_3
0:0.2.0-38.el7_3
libtirpc
Red Hat:enterprise_linux:7::client
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-devel
Red Hat:enterprise_linux:7::client
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc
Red Hat:enterprise_linux:7::computenode
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc
Red Hat:enterprise_linux:7::server
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-devel
Red Hat:enterprise_linux:7::server
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc
Red Hat:enterprise_linux:7::workstation
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
libtirpc-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.2.4-0.8.el7_3
0:0.2.4-0.8.el7_3
rpcbind
Red Hat:enterprise_linux:6::client
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind
Red Hat:enterprise_linux:6::computenode
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind
Red Hat:enterprise_linux:6::server
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind
Red Hat:enterprise_linux:6::workstation
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
rpcbind-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.2.0-13.el6_9
0:0.2.0-13.el6_9
libtirpc
Red Hat:enterprise_linux:6::client
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-devel
Red Hat:enterprise_linux:6::client
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc
Red Hat:enterprise_linux:6::computenode
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc
Red Hat:enterprise_linux:6::server
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-devel
Red Hat:enterprise_linux:6::server
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc
Red Hat:enterprise_linux:6::workstation
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libtirpc-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.2.1-13.el6_9
0:0.2.1-13.el6_9
libntirpc
Red Hat:storage:3.2:nfs:el6
 before 0:1.4.3-4.el6rhs
0:1.4.3-4.el6rhs
libntirpc-debuginfo
Red Hat:storage:3.2:nfs:el6
 before 0:1.4.3-4.el6rhs
0:1.4.3-4.el6rhs
libntirpc-devel
Red Hat:storage:3.2:nfs:el6
 before 0:1.4.3-4.el6rhs
0:1.4.3-4.el6rhs
libntirpc
Red Hat:storage:3.2:nfs:el7
 before 0:1.4.3-4.el7rhgs
0:1.4.3-4.el7rhgs
libntirpc-debuginfo
Red Hat:storage:3.2:nfs:el7
 before 0:1.4.3-4.el7rhgs
0:1.4.3-4.el7rhgs
libntirpc-devel
Red Hat:storage:3.2:nfs:el7
 before 0:1.4.3-4.el7rhgs
0:1.4.3-4.el7rhgs
libtirpc
SUSE:Linux Enterprise Desktop 12 SP1
 before 0.2.3-13.3.1
0.2.3-13.3.1
libtirpc
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 0.2.3-13.3.1
0.2.3-13.3.1
libtirpc
SUSE:Linux Enterprise Server 12 SP1
 before 0.2.3-13.3.1
0.2.3-13.3.1
libtirpc
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 0.2.3-13.3.1
0.2.3-13.3.1
libtirpc
SUSE:Linux Enterprise Desktop 12 SP2
 before 1.0.1-16.1
1.0.1-16.1
libtirpc
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 1.0.1-16.1
1.0.1-16.1
libtirpc
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 1.0.1-16.1
1.0.1-16.1
libtirpc
SUSE:Linux Enterprise Server 12 SP2
 before 1.0.1-16.1
1.0.1-16.1
libtirpc
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.0.1-16.1
1.0.1-16.1
rpcbind
SUSE:Linux Enterprise Desktop 12 SP2
 before 0.2.3-23.1
0.2.3-23.1
rpcbind
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 0.2.3-23.1
0.2.3-23.1
rpcbind
SUSE:Linux Enterprise Server 12 SP2
 before 0.2.3-23.1
0.2.3-23.1
rpcbind
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 0.2.3-23.1
0.2.3-23.1
rpcbind
SUSE:Linux Enterprise Desktop 12 SP1
 before 0.2.1_rc4-17.3.1
0.2.1_rc4-17.3.1
rpcbind
SUSE:Linux Enterprise Server 12 SP1
 before 0.2.1_rc4-17.3.1
0.2.1_rc4-17.3.1
rpcbind
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 0.2.1_rc4-17.3.1
0.2.1_rc4-17.3.1
libtirpc
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.2.1-1.12.3
0.2.1-1.12.3
libtirpc
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 0.2.1-1.12.3
0.2.1-1.12.3
rpcbind
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 0.1.6+git20080930-6.27.2
0.1.6+git20080930-6.27.2
libtirpc
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 0.2.1-1.12.3
0.2.1-1.12.3
rpcbind
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 0.1.6+git20080930-6.27.2
0.1.6+git20080930-6.27.2
libtirpc
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 0.2.1-1.12.3
0.2.1-1.12.3
rpcbind
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 0.1.6+git20080930-6.27.2
0.1.6+git20080930-6.27.2
libtirpc
SUSE:Linux Enterprise Server 11 SP4
 before 0.2.1-1.12.3
0.2.1-1.12.3
rpcbind
SUSE:Linux Enterprise Server 11 SP4
 before 0.1.6+git20080930-6.27.2
0.1.6+git20080930-6.27.2
libtirpc
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.2.1-1.12.3
0.2.1-1.12.3
rpcbind
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.1.6+git20080930-6.27.2
0.1.6+git20080930-6.27.2
libtirpc
Ubuntu:14.04:LTS
 before 0.2.2-5ubuntu2.1, plus listed versions
0.2.2-5ubuntu10.2.2-5ubuntu2
0.2.2-5ubuntu2.1
rpcbind
Ubuntu:Pro:14.04:LTS
 before 0.2.1-2ubuntu2.2+esm1, plus listed versions
0.2.0-8.2ubuntu20.2.1-2ubuntu10.2.1-2ubuntu2.10.2.1-2ubuntu2.2
0.2.1-2ubuntu2.2+esm1
libtirpc
Ubuntu:16.04:LTS
 before 0.2.5-1ubuntu0.1, plus listed versions
0.2.5-1
0.2.5-1ubuntu0.1
rpcbind
Ubuntu:Pro:16.04:LTS
 before 0.2.3-0.2ubuntu0.16.04.1+esm1, plus listed versions
0.2.1-6ubuntu40.2.3-0.20.2.3-0.2ubuntu0.10.2.3-0.2ubuntu0.16.04.1
0.2.3-0.2ubuntu0.16.04.1+esm1
ntirpc
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.3.1-1
 None known
rpcbind
Ubuntu:18.04:LTS
 before 0.2.3-0.6ubuntu0.18.04.2, plus listed versions
0.2.3-0.60.2.3-0.6ubuntu0.18.04.1
0.2.3-0.6ubuntu0.18.04.2
libtirpc
Ubuntu:18.04:LTS
 before 0.2.5-1.2ubuntu0.1, plus listed versions
0.2.5-1.2
0.2.5-1.2ubuntu0.1
rpcbind
openSUSE:Tumbleweed
 before 1.2.6-2.2
1.2.6-2.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBRPCBind / libtirpc - Denial of Service2017-05-08
MetasploitRPC DoS targeting *nix rpcbind/libtirpc
PoC in GitHubdrbothen/GO-RPCBOMB2017-05-09

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-8779 is a high vulnerability (CVSS 7.5) in Libtirpc Project Libtirpc, published May 4, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 81.2%, the 99th percentile. Fixed in rpcbind 0.2.4-r0.

References

Show 114 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open