CVE-2026-85231

Awaiting Analysis Awaiting Analysis - Queue

Authenticated RPCSEC_GSS DoS in libtirpc via Oversized Wrapped Data

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: redhat-SADP

Description

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-16

Last Modified

2026-10-16

Generated

2026-10-17

AI Q&A

2026-10-17

EPSS Evaluated

N/A

NVD

CVE-2026-85231

EUVD

EUVD-2026-103019

Affected Vendors & Products

Vendor	Product	Version / Range
Red	Hat	Red Hat Enterprise Linux 10 *
Red	Hat	Red Hat Enterprise Linux 6 *
Red	Hat	Red Hat Enterprise Linux 7 *
Red	Hat	Red Hat Enterprise Linux 8 *
Red	Hat	Red Hat Enterprise Linux 9 *
Red	Hat	Red Hat Hardened Images *
Red	Hat	Red Hat OpenShift Container Platform 4 *

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability is a flaw in libtirpc where an authenticated remote attacker can send oversized wrapped data requests to an RPC service using RPCSEC_GSS integrity or privacy. This causes unbounded memory allocation, leading to a Denial of Service by exhausting system resources and making the service unstable or crash.

Detection Guidance

Monitor RPC services for unusual memory usage or crashes. Check logs for oversized wrapped data requests. Use network monitoring tools to detect abnormal traffic patterns targeting RPC ports.

Impact Analysis

If exploited, this vulnerability can cause system crashes or instability due to excessive memory usage. Services relying on RPC may become unavailable, disrupting applications and operations that depend on them.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by causing service instability or termination due to resource exhaustion. GDPR requires maintaining system availability and integrity, while HIPAA mandates protection against disruptions that could affect protected health information access. A DoS condition may violate these requirements.

Mitigation Strategies

Update libtirpc to the latest patched version. Disable RPCSEC_GSS integrity or privacy if not required. Restrict RPC service access via firewalls to trusted networks only.

Hi! I’m here to help you understand CVE-2026-85231. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70