rpm package
opensuse/rpcbind&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/rpcbind&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-94640 | Hig | 7.5 | < 1.2.9-160000.3.1 | 1.2.9-160000.3.1 | Sep 22, 2026 | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory l | |
| CVE-2026-16461 | Med | 6.5 | < 1.2.9-160000.2.1 | 1.2.9-160000.2.1 | Jul 21, 2026 | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version numbers from a remote RPCBPROC_DUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs `rpcinfo - |
- affected < 1.2.9-160000.3.1fixed 1.2.9-160000.3.1
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory l
- affected < 1.2.9-160000.2.1fixed 1.2.9-160000.2.1
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version numbers from a remote RPCBPROC_DUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs `rpcinfo -