CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.

Score
CVSS 3.1 6.5 Medium
Status
Awaiting Analysis - secalert@redhat.com
Published
2026-10-16
Last modified
2026-10-16
Weaknesses
CWE-770

Affected products

References

 
 
© AVABIS GmbH privacypolicy about