Description
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).
References
- http://www.info.apple.com/usen/security/security_updates.html
- oval:org.mitre.oval:def:2248 vdb-entry signature
- HPSBUX01020 vendor-advisory
- sun-rpc-libc-dos(10539) vdb-entry
- 6103 vdb-entry
- 51082 vendor-advisory
- VU#266817 third-party-advisory