Live › vulnerability › CVE-2026-85977
Go to dashboardlibtirpc's pmap_getmaps() decodes PMAPPROC_DUMP replies without a bound, so a malicious server can make the client allocate excessive memory and CPU. The result is a denial of service that crashes or stalls the calling client process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only client applications that call pmap_getmaps() and talk to an attacker-controlled portmapper or RPC host are exposed. Servers and clients that do not use pmap_getmaps() against untrusted hosts are not affected by this description.
No product ranges from the sources yet.
unknownEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion.
This page as .md · .json · in your agent: get_signal("CVE-2026-85977")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.