CVE-2026-16277

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux 8 (affected versions not specified)

Description A stack-based buffer overflow exists in the rpcinfo utility of rpcbind. This occurs when the rpcinfo -l command queries a remote rpcbind service and the server returns address information that is copied into a fixed-size buffer without adequate bounds checking. A compromised or malicious rpcbind server can exploit this to crash the rpcinfo client, leading to a denial of service and impacting system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.