What’s Vulnerable › Vulnerabilities

CVE-2013-1950

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-07-09 · updated 2026-06-16
Weakness: CWE-399

Description

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.

Affected products

[UNKNOWN] libtirpc: through 0.2.3; 0.1.8, 0.1.9, 0.1.10, 0.1.11, 0.2.0, 0.2.1 (+1)

References

Get alerted when CVE-2013-1950 or the next vulnerability affects your stack