CVE-2015-9265
An issue was discovered in libtirpc before 1.0.1 allowing for remote crash of RPC services. Due to a missing check of the return value for NULL within makefd_xprt(), the rendezvous_request() function in svc_vc.c might perform a NULL pointer dereference and hence crash the application resulting in a denial of service in situations where file descriptors are exhausted (i.e., fd >= FD_SETSIZE).
Source: CVE-2015-9265