CVE-2021-46828
HighCVSS 7.5Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Risk Assessment
May lead to denial of service by exhausting resources and blocking acceptance of new connections.
Recommendation
Update libtirpc to version 1.3.3rc1 or later.
Other vulnerabilities in libtirpc
See all- CVE-2026-85977Medium
A flaw was found in libtirpc involving unbounded decoding of PMAPPROC_DUMP replies. A remote attacker can send specially crafted replies to a client application using the pmap_getmaps() function against an attacker-controlled host, causing excessive memory and CPU allocation and a denial of service (DoS) in the client process due to resource exhaustion.
- CVE-2026-85231Medium
A flaw was found in libtirpc allowing an authenticated remote attacker to send oversized wrapped data requests to an RPC service configured with RPCSEC_GSS integrity or privacy. This leads to unbounded memory allocation and a denial of service (DoS) by exhausting system resources, causing the service to become unstable or terminate.
Original NVD description (English source)
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS