Amazon Linux AMI Security Advisory: ALAS-2020-1362
Advisory Release Date: 2020-04-20 20:38 Pacific
Advisory Updated Date: 2020-04-23 23:05 Pacific
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections. (CVE-2018-14622 )
Run yum update libtirpc to update your system.