Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Red Hat: RHSA-2016:0005-01 moderate: rpcbind Remote Exploit

red hat
Calendar Grey January 7, 2016
Scroller Redhat
Ubuntu issues Critical security patch for openssh addressing a network vulnerability. Vital for protecting systems.
Updated rpcbind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Summary

The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine.
A use-after-free flaw related to the PMAP_CALLIT operation and TCP/UDP connections was discovered in rpcbind. A remote attacker could possibly exploit this flaw to crash the rpcbind service by performing a series of UDP and TCP calls. (CVE-2015-7236)
All rpcbind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. If the rpcbind service is running, it will be automatically restarted after installing this update.

Topics%20covered

Topics Covered

security advisory moderate remote exploit Red Hat Enterprise Linux rpcbind

References

https://access.redhat.com/security/cve/CVE-2015-7236 https://access.redhat.com/security/updates/classification#moderate

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source: rpcbind-0.2.0-11.el6_7.src.rpm
i386: rpcbind-0.2.0-11.el6_7.i686.rpm rpcbind-debuginfo-0.2.0-11.el6_7.i686.rpm
x86_64: rpcbind-0.2.0-11.el6_7.x86_64.rpm rpcbind-debuginfo-0.2.0-11.el6_7.x86_64.rpm
Red Hat Enterprise Linux HPC Node (v. 6):
Source: rpcbind-0.2.0-11.el6_7.src.rpm
x86_64: rpcbind-0.2.0-11.el6_7.x86_64.rpm rpcbind-debuginfo-0.2.0-11.el6_7.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source: rpcbind-0.2.0-11.el6_7.src.rpm
i386: rpcbind-0.2.0-11.el6_7.i686.rpm rpcbind-debuginfo-0.2.0-11.el6_7.i686.rpm
ppc64: rpcbind-0.2.0-11.el6_7.ppc64.rpm rpcbind-debuginfo-0.2.0-11.el6_7.ppc64.rpm
s390x: rpcbind-0.2.0-11.el6_7.s390x.rpm rpcbind-debuginfo-0.2.0-11.el6_7.s390x.rpm
x86_64: rpcbind-0.2.0-11.el6_7.x86_64.rpm rpcbind-debuginfo-0.2.0-11.el6_7.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source: rpcbind-0.2.0-11.el6_7.src.rpm
i386: rpcbind-0.2.0-11.el6_7.i686.rpm rpcbind-debuginfo-0.2.0-11.el6_7.i686.rpm
x86_64: rpcbind-0.2.0-11.el6_7.x86_64.rpm rpcbind-debuginfo-0.2.0-11.el6_7.x86_64.rpm
Red Hat Enterprise Linux Client (v. 7):
Source: rpcbind-0.2.0-33.el7_2.src.rpm
x86_64: rpcbind-0.2.0-33.el7_2.x86_64.rpm rpcbind-debuginfo-0.2.0-33.el7_2.x86_64.rpm
Red Hat Enterprise Linux ComputeNode (v. 7):
Source:

Read the Full Advisory


Advisory ID: RHSA-2016:0005-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2016:0005.html
Issue date: 2016-01-07

Topic

Updated rpcbind packages that fix one security issue are now available forRed Hat Enterprise Linux 6 and 7.Red Hat Product Security has rated this update as having Moderate securityimpact. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available from the CVE link in theReferences section.

Topics%20covered

Topics Covered

security advisory moderate remote exploit Red Hat Enterprise Linux rpcbind

Relevant Releases Architectures

Red Hat Enterprise Linux Client (v. 7) - x86_64

Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64

Red Hat Enterprise Linux HPC Node (v. 6) - x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64

Red Hat Enterprise Linux Workstation (v. 7) - x86_64

Bugs Fixed

1264345 - CVE-2015-7236 rpcbind: Use-after-free vulnerability in PMAP_CALLIT

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.