Description
The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | nscd +7 | 2.12-1.47.el6_2.5 | RHSA-2012:0058 |
| RHEL 5 | nscd +6 | 2.5-65.el5_7.3 | RHSA-2012:0126 |
| RHEL 4 | nscd +8 | 2.3.4-2.57 | RHSA-2012:0125 |
Advisories 3
- RHSA-2012:0125 Red Hat Security Advisory: glibc security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:0126 Red Hat Security Advisory: glibc security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:0058 Red Hat Security Advisory: glibc security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026