GO-RPCBOMB

Description: CVE-2017-8779 rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with ...

libtirpc-devel-1.3.8-1.1 on GA media (moderate)

libtirpc-devel-1.3.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:12244-1 Rating: moderate Cross-References: CVE-2026-85231 CVE-2026-85977 CVSS scores: CVE-2026-85231 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-85231 SUSE : 7.1...

CLEANSTART-2023-VN19884 In libtirpc before 1

Security vulnerability affects the libtirpc package. In libtirpc before 1...

UBUNTU-CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulne...

PT-2026-122913

These are all security issues fixed in the libtirpc-devel-1.3.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12244-1 libtirpc-devel-1.3.8-1.1 on GA media

These are all security issues fixed in the libtirpc-devel-1.3.8-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

SUSE CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

DEBIAN-CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

DEBIAN-CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

UBUNTU-CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

EUVD-2026-103020

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977

A vulnerability exists in libtirpc where a remote attacker can trigger a Denial of Service (DoS) by sending specially crafted PMAPPROC_DUMP replies. The flaw occurs when a client application uses the pmap_getmaps() function against an attacker-controlled host, leading to unbounded decoding that c...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977 Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85977 Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...