Description
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nis | 3.11 | — |
| Debian 13 | nis | 3.11 | — |
| Debian 12 | nis | 3.11 | — |
References
- 8031 vdb-entry
- 21112 third-party-advisory
- RHSA-2003:201 vendor-advisory
- oval:org.mitre.oval:def:667 vdb-entry signature
- TLSA-2003-43 vendor-advisory
- HPSBTU02132 vendor-advisory
- MDKSA-2003:072 vendor-advisory
- 55600 vendor-advisory
- ADV-2006-2873 vdb-entry
- RHSA-2003:173 vendor-advisory
- 1016517 vdb-entry