rpcbind DoS when running with -l

[Fred Souza]

Hi,

  I've just run into a new bug. I was running rpcbind with the -l flag,
  and when I started Opera and it tried connecting to 127.0.0.1:111 to
  begin the DNS resolution phase, rpcbind started fork()'ing and eating
  up all resources.

  After a few minutes, I could get this from `ps`:

root ~ # ps ax
  PID  TT  STAT      TIME COMMAND
    0  ??  ZW     0:00.00  (rpcbind)
    0  ??  ZW     0:00.00  (rpcbind)
    0  ??  ZW     0:00.00  (rpcbind)
    0  ??  ZW     0:00.00  (rpcbind)
    0  ??  ZW     0:00.00  (rpcbind)
  [snip]
11259  ??  S      0:00.03 rpcbind: logit (rpcbind)
11260  ??  S      0:00.03 rpcbind: logit (rpcbind)
11262  ??  S      0:00.03 rpcbind: logit (rpcbind)
11263  ??  S      0:00.02 rpcbind: logit (rpcbind)
11264  ??  S      0:00.02 rpcbind: logit (rpcbind)
  [snip]

  and the box wouldn't respond until I finally got X killed and thus
  Opera too.


  Fred


-- 
"The purpose of Physics 7A is to make the engineers realize that they're
not perfect, and to make the rest of the people realize that they're not
engineers."

pgp00000.pgp
Description: PGP signature