It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-890 advisory.

    In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses     libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop     without accepting new connections. (CVE-2021-46828)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses     libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop     without accepting new connections. (CVE-2021-46828)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4495:04 advisory.

    * libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libtirpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses     libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop     without accepting new connections. (CVE-2021-46828)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8400 advisory.

    The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-     RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages.

    Security Fix(es):

    * libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8400 advisory.

  - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses     libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop     without accepting new connections. (CVE-2021-46828)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libtirpc package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses     libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop     without accepting new connections. (CVE-2021-46828)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5200 advisory.

    It was discovered that libtirpc, a transport-independent RPC library, does not properly handle idle TCP     connections. A remote attacker can take advantage of this flaw to cause a denial of service. For the     stable distribution (bullseye), this problem has been fixed in version 1.3.1-1+deb11u1. We recommend that     you upgrade your libtirpc packages. For the detailed security status of libtirpc please refer to its     security tracker page at: https://security-tracker.debian.org/tracker/libtirpc

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3071 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3071-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     August 11, 2022                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libtirpc     Version        : 1.1.4-0.4+deb10u1     CVE ID         : CVE-2021-46828     Debian Bug     : 1015873

    It was discovered that libtirpc, a transport-independent RPC library,     does not properly handle idle TCP connections. A remote attacker can     take advantage of this flaw to cause a denial of service.

    For Debian 10 buster, this problem has been fixed in version     1.1.4-0.4+deb10u1.

    We recommend that you upgrade your libtirpc packages.

    For the detailed security status of libtirpc please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libtirpc

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8400 advisory.

    [1.3.3]
    - Rebased to libtirpc-1.3.3 (bz 2118157)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libtirpc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses     libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop     without accepting new connections. (CVE-2021-46828)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
232282	Amazon Linux 2023 : libtirpc, libtirpc-devel (ALAS2023-2025-890)	Nessus	Amazon Linux Local Security Checks	2025/3/7	2025/3/7	high
257414	Linux Distros Unpatched Vulnerability : CVE-2021-46828	Nessus	Misc.	2025/8/27	2025/8/27	high
293023	MiracleLinux 9 : libtirpc-1.3.3-0.el9 (AXSA:2022-4495:04)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
165051	EulerOS 2.0 SP9 : libtirpc (EulerOS-SA-2022-2327)	Nessus	Huawei Local Security Checks	2022/9/14	2022/12/5	high
166827	EulerOS 2.0 SP10 : libtirpc (EulerOS-SA-2022-2690)	Nessus	Huawei Local Security Checks	2022/11/2	2022/11/28	high
167576	RHEL 9 : libtirpc (RHSA-2022:8400)	Nessus	Red Hat Local Security Checks	2022/11/16	2024/11/7	high
167836	AlmaLinux 9 : libtirpc (ALSA-2022:8400)	Nessus	Alma Linux Local Security Checks	2022/11/18	2022/11/24	high
169375	EulerOS Virtualization 2.10.0 : libtirpc (EulerOS-SA-2022-2910)	Nessus	Huawei Local Security Checks	2022/12/28	2022/12/28	high
163912	Debian DSA-5200-1 : libtirpc - security update	Nessus	Debian Local Security Checks	2022/8/7	2025/1/24	high
164083	Debian dla-3071 : libtirpc-common - security update	Nessus	Debian Local Security Checks	2022/8/11	2025/1/22	high
165413	EulerOS Virtualization 2.9.0 : libtirpc (EulerOS-SA-2022-2389)	Nessus	Huawei Local Security Checks	2022/9/24	2022/12/2	high
168115	Oracle Linux 9 : libtirpc (ELSA-2022-8400)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/10/22	high
177165	EulerOS Virtualization 3.0.6.0 : libtirpc (EulerOS-SA-2023-2201)	Nessus	Huawei Local Security Checks	2023/6/13	2023/6/13	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high