CVE-2015-7236

Name of the Vulnerable Software and Affected Versions rpcbind versions 0.2.1 and earlier

Description The issue is related to a use-after-free vulnerability in the xprt set caller function, which can be exploited by remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved through crafted packets involving a PMAP CALLIT code.

Recommendations For rpcbind versions 0.2.1 and earlier, consider updating to a version later than 0.2.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.