CVE-2018-14621
Fixed in a distro release EPSS 2%CVSS 5.3
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted.
Products: libtirpc_project libtirpc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Server 11 SP4 | libtirpc | 0.2.1-1.13.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libtirpc | 0.2.1-1.13.6.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libtirpc | 0.2.1-1.13.6.1 |