CVE-2026-16461

Name of the Vulnerable Software and Affected Versions rpcbind (affected versions not specified)

Description A stack-based buffer overflow exists in the rpcinfo utility. When operating in short mode via the rpcinfo -s command, the rpcbdump() function writes version numbers from a remote RPCBPROC DUMP reply into a fixed-size stack buffer without performing bounds checking. This can lead to a crash or denial of service for the rpcinfo client if it is used against a malicious or compromised rpcbind endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.