CVE-2017-8779
Published · Updated
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 81%
from disclosure to weapon4 days
Published on NVDMay 4
1st PoC+4d
exploitation probability
81%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Fixed
21 products (439 components)
Red Hat Ceph Storage Tools 2 · Red Hat Ceph Storage MON 2 · Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Ceph Storage OSD 2 · and others 16
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/41974unverifiedgithubgithub.com/drbothen/GO-RPCBOMB★ 4cve_referencewww.exploit-db.com/exploits/41974/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://openwall.com/lists/oss-security/2017/05/03/12http://openwall.com/lists/oss-security/2017/05/04/1https://access.redhat.com/errata/RHBA-2017:1497https://access.redhat.com/errata/RHSA-2017:1262https://access.redhat.com/errata/RHSA-2017:1263https://access.redhat.com/errata/RHSA-2017:1267https://access.redhat.com/errata/RHSA-2017:1268https://access.redhat.com/errata/RHSA-2017:1395https://github.com/drbothen/GO-RPCBOMBhttps://github.com/guidovranken/rpcbomb/https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/https://security.gentoo.org/glsa/201706-07