Amazon Linux AMI Security Advisory: ALAS-2017-841
Advisory Release Date: 2017-06-06 17:03 Pacific
Advisory Updated Date: 2017-06-06 22:50 Pacific
It was found that due to the way rpcbind uses libtirpc (libntirpc), a memory
leak can occur when parsing specially crafted XDR messages. An attacker sending
thousands of messages to rpcbind could cause its memory usage to grow without
bound, eventually causing it to be terminated by the OOM killer. (CVE-2017-8779)
Run yum update rpcbind to update your system.