GO-RPCBOMB

Description: CVE-2017-8779 rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with ...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977 Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

EUVD-2026-103020

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977

A vulnerability exists in libtirpc where a remote attacker can trigger a Denial of Service (DoS) by sending specially crafted PMAPPROC_DUMP replies. The flaw occurs when a client application uses the pmap_getmaps() function against an attacker-controlled host, leading to unbounded decoding that c...

CVE-2026-85231

A flaw in libtirpc allows an authenticated remote attacker to trigger a Denial of Service (DoS) by sending oversized wrapped data requests to an RPC service configured with RPCSEC_GSS integrity or privacy. The root cause is unbounded memory allocation during rpcsec_gss decoding, which can exhaust...

CVE-2026-85231 Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

EUVD-2026-103019

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-85231: Allocation of Resources Without Limits or Throttling

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-85977: Excessive Platform Resource Consumption within a Loop

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

PT-2026-116130

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSEC GSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead...

PT-2026-116131

Name of the Vulnerable Software and Affected Versions libtirpc affected versions not specified Description A flaw exists where a remote attacker can trigger a Denial of Service DoS by sending specially crafted PMAPPROC DUMP replies to a client application. This occurs when the application uses th...

Linux Distros Unpatched Vulnerability : CVE-2026-85977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that us...

Linux Distros Unpatched Vulnerability : CVE-2026-85231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote...

Rocky Linux 9 [CIQ] Security Update: libtirpc / libtirpc-debuginfo / libtirpc-debugsource / etc (crlsa-2022_8400)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228400 advisory. libtirpc: DoS vulnerability with lots of connections CVE-2021-46828 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: libtirpc / libtirpc-debuginfo / libtirpc-debugsource / etc (crlba-2022_2065)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20222065 advisory. For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section. This advisory is provided by Ctrl IQ,...