CVE:CVE-2018-14622
CNNVD:CNNVD-201808-997
libtirpc是一个包含支持使用远程过程调用（RPC）API的软件包。
libtirpc 0.3.3-rc3之前版本中存在安全漏洞，该漏洞源于在所有的实例中，程序没有检测‘makefd_xprt()’函数的返回值。远程攻击者可通过创建新的连接洪泛基于rpc的应用程序利用该漏洞造成该应用程序崩溃（空指针逆向引用）。
solution:Upgrade libtirpc_project libtirpc to a higher version than 0.3.3,and avoid the version (,0.3.3); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,7.6,and avoid the version 7.4,7.5,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0