← Database

CVE-2021-46828

HIGH CVSS: 7.5 Published: 2022-07-20 Modified: 2026-06-17

Description

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.

Affected Platforms

Debian Debian LinuxLibtirpc Project Libtirpc

Weakness Type

CWE-755, CWE-835, CWE-755

References