CVE-2026-85977CWE-1050

CVE-2026-85977

Medium · published October 16, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-1050 · Excessive Platform Resource Consumption within a Loop
Published
2026-10-16T23:17Z
References (4)
https://access.redhat.com/errata/RHSA-2026:80360 · [email protected]https://access.redhat.com/security/cve/CVE-2026-85977 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2478979 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2478979 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 18 OCT 03:32Z
    EPSS moved — → 0%
    epss
  • 16 OCT 18:20Z
    Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding
    cvelistv5
  • 16 OCT 18:20Z
    Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding
    cvelistv5