ArchLinux: 201705-4: rpcbind: denial of service
Summary
It was found that libtirpc and libntirpc fails to free a buffer allocated for parsing XDR blocks when parsing fails due to insufficient input data being available. A specially crafted message sent to a service such as rpcbind results in a memory leak, causing the application to crash or other processes to be impacted via the OOM killer.
Resolution
Upgrade to 0.2.4-3.
# pacman -Syu "rpcbind>=0.2.4-3"
The problem has been fixed upstream but no release is available yet.
References
https://bugs.archlinux.org/task/53927 https://guidovranken.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/ https://security.archlinux.org/CVE-2017-8779
Workaround
None.