CVE-2026-94640
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage.
Risk Assessment
An attacker can exhaust system resources, causing degradation or unavailability of the rpcbind service, which may disrupt dependent applications. This can lead to service outages and loss of productivity.
Recommendation
Update rpcbind to a patched version or apply a workaround by restricting access to the rpcbind service from untrusted networks. Monitor memory and CPU usage of rpcbind.
Other vulnerabilities in rpcbind
See all- CVE-2015-7236High
A use-after-free vulnerability in the xprt_set_caller function in rpcb_svc_com.c in rpcbind version 0.2.1 and earlier allows remote attackers to cause a daemon crash via crafted packets involving a PMAP_CALLIT code.
- CVE-2026-16461Medium
A stack-based buffer overflow was found in rpcinfo utility from rpcbind. In short mode (rpcinfo -s), version numbers from a remote RPCBPROC_DUMP reply are written into a fixed-size stack buffer without bounds checking.
- CVE-2026-16277Medium
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this flaw to crash the rpcinfo client, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
- CVE-1999-0461High
Versions of rpcbind, including Linux, IRIX, and Wietse Venema's rpcbind, allow a remote attacker to insert and delete entries by spoofing a source address.
Original NVD description (English source)
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage. This can degrade or exhaust service availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS