CVE-2026-16277
Received Received - Intake

Stack-Based Buffer Overflow in rpcinfo Utility

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: Red Hat, Inc.

Description
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this flaw to crash the rpcinfo client, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-16277
EUVD
EUVD-2026-45950

Affected Vendors & Products

Showing 13 associated CPEs
Vendor Product Version / Range
redhat rpcbind *
redhat libheif *
redhat sshfs *
redhat libde265 *
redhat 7zip *
redhat libslirp *
redhat wireshark *
redhat vim *
redhat mariadb *
redhat libaom *
redhat postgresql *
redhat xml *
redhat ruby *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-16277 is a stack-based buffer overflow in rpcbind's rpcinfo utility. When querying a remote rpcbind service using `rpcinfo -l`, the client copies address information from the server into a fixed-size buffer without proper bounds checking. A malicious or compromised rpcbind server could exploit this to crash the rpcinfo client, causing a denial of service. The primary risk is to system availability.

Detection Guidance

Check if rpcinfo is installed and verify its version. Run `rpcinfo -l host prog vers` against untrusted hosts to observe crashes or errors. Monitor system logs for rpcinfo crashes or segmentation faults.

Impact Analysis

This vulnerability allows a remote attacker to crash the rpcinfo client by sending oversized strings, leading to a denial of service. Exploitation requires no privileges and depends on user interaction, such as running `rpcinfo -l` or `rpcinfo -s` against an untrusted host. The impact is limited to client-side crashes with no evidence of data theft or code execution.

Compliance Impact

This vulnerability primarily impacts system availability by causing denial of service through client crashes. It does not directly lead to data disclosure, modification, or unauthorized access, which are key concerns for GDPR and HIPAA compliance. However, repeated denial of service incidents could indirectly affect compliance by disrupting services handling personal or health data.

Mitigation Strategies

Avoid using rpcinfo against untrusted hosts. Update rpcbind to a patched version once available. Disable rpcbind services if not required. Monitor vendor advisories for official patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16277. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart