CVE-2021-46828
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.
Published Jul 20, 2022 · updated Oct 14, 2026 · libtirpc project libtirpc
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Timeline
Detection, updates, and resolution for this record.
Jul 20, 2022 · NIST NVD
Detected
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Oct 14, 2026 · NIST NVD
Updated
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Affected
- cpe debian/debian linux10.0
- cpe debian/debian linux11.0
- cpe libtirpc project/libtirpcversion unspecified
Sources
- CVE.orgCVE-2021-46828
Official CVE identifier
cve.org - NIST NVDCVE-2021-46828
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
nvd.nist.gov