CVE-2015-7236 in Solaris

Résumé (Anglaise)

Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Réserver

17/09/2015

Divulgation

01/10/2015

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
82665	Oracle Solaris Utilities buffer overflow	416	Non défini	Correctif officiel	CVE-2015-7236
78153	rpcbind Daemon PMAP_CALLIT buffer overflow	416	Non prouvée	Correctif officiel	CVE-2015-7236

Sources

• MITRE
• NVD
• CVE Details