An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9449 advisory.

    [1.1.4-4.0.1]
    - Backport fix for CVE-2018-14621 in libtirpc [Orabug: 33017925]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libtirpc package has been released.

This update for libtirpc fixes the following issues :

Security issues fixed :

CVE-2018-14621: libtirpc: Infinite loop in EMFILE case in svc_vc.c (bsc#1106519)

CVE-2018-14622: libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c (bsc#1106517)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
153390	Oracle Linux 8 : libtirpc (ELSA-2021-9449)	Nessus	Oracle Linux Local Security Checks	high
122011	Photon OS 2.0: Libtirpc PHSA-2018-2.0-0113	Nessus	PhotonOS Local Security Checks	high
121898	Photon OS 1.0: Libtirpc PHSA-2018-1.0-0198	Nessus	PhotonOS Local Security Checks	high
118141	SUSE SLES11 Security Update : libtirpc (SUSE-SU-2018:3146-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-14621

high

Tenable Plugins

high

high

high

high