CVE:CVE-2015-7236
CNNVD:CNNVD-201510-003
rpcbind是一个将RPC程序号转换为通用地址的服务。
rpcbind 0.2.1及之前版本的rpcb_svc_com.c文件中的xprt_set_caller存在释放后重用漏洞。远程攻击者可通过发送特制的数据包利用该漏洞造成拒绝服务（守护进程崩溃）。
solution:Upgrade rpcbind_project rpcbind to a higher version than 0.2.1,and avoid the version (,0.2.1]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3