Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Threat-Mapped Scoring

Score: 1.8

Priority: P4 - Informational (Low)

• S9 – Sabotage of System/App

EPSS

Score: 0.0457
Percentile: 0.88748

CVSS Scoring

Mapped CWE(s)

• CWE-190 : Integer Overflow or Wraparound

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

Affected Products

• cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
• cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*
• cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
• cpe:2.3:o:sun:solaris:9.0:*:*:*:*:sparc:*:*
• cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*
• cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
• cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*

← Back to Home