GHSA-xhf3-w45r-cmh3MediumCVSS 6.5

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability...

Published
October 16, 2026
Last Modified
October 16, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.

🔗 References (4)