← Vulnerability feed

Vulnerability record · CVE-2018-14621 · published 30 August 2018

CVE-2018-14621: Libtirpc project libtirpc vulnerability

LLibtirpc Project · Libtirpc

An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted.

7.5 CVSS 3.0 High EPSS 2.3% · top 17.7% CWE-835 · CWE-835
7.5CVSS 3.0 base score, v2 7.8
2.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://git.linux-nfs.org/?p=steved/libtirpc.git%3Ba=commit%3Bh=fce98161d9815ea016855d9f00274276452c2c4b
https://bugzilla.novell.com/show_bug.cgi?id=968175 Issue TrackingPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14621 Issue TrackingPatchThird Party Advisory
http://git.linux-nfs.org/?p=steved/libtirpc.git%3Ba=commit%3Bh=fce98161d9815ea016855d9f00274276452c2c4b
https://bugzilla.novell.com/show_bug.cgi?id=968175 Issue TrackingPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14621 Issue TrackingPatchThird Party Advisory

Track CVE-2018-14621 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2021-46828Libtirpc project libtirpc vulnerabilityIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mis…EPSS 2.8%7.5CVE-2018-14622Libtirpc project libtirpc unchecked return value vulnerabilityA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all ins…EPSS 3.9%7.5CVE-2017-8779rpcbind, libtirpc and ntirpc unbounded XDR allocation denial of servicerpcbind through 0.2.4, libtirpc through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and ntirpc through 1.4.3 allocate memory for XDR strings without enforc…EPSS 81%analysed4.3CVE-2013-1950Libtirpc project libtirpc vulnerabilityThe svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request …EPSS 6.5%8.6CVE-2024-20353Cisco ASA and FTD web server HTTP header parsing DoSCisco ASA and FTD management and VPN web servers fail to fully check errors when parsing an HTTP header, so a crafted request can crash and reload th…KEVEPSS 71%analysed

Source: NIST National Vulnerability Database (record CVE-2018-14621), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.