CVE-2026-16277— Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any | affected |
| Red Hat | Red Hat Enterprise Linux 8 | any | affected |
| Red Hat | Red Hat Enterprise Linux 9 | any | affected |
| Red Hat | Red Hat OpenShift Container Platform 4 | any | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-16277
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()
Source: CVE Program / CVE List V5
Vulnerability Description
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this flaw to crash the rpcinfo client, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat Enterprise Linux 10 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Enterprise Linux 10是美国Red Hat公司的一套面向企业用户的Linux操作系统。 Red Hat Enterprise Linux 10版本、Red Hat Enterprise Linux 8版本、Red Hat Enterprise Linux 9版本和Red Hat OpenShift Container Platform 4版本存在缓冲区错误漏洞，该漏洞源于rpcbind的rpcinfo工具中存在栈缓冲区溢出，在查询远程rpcbind服务时，服务器返回的地址信
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | cpe:/o:redhat:enterprise_linux:10 | |
| Red Hat | Red Hat Enterprise Linux 8 | - | cpe:/o:redhat:enterprise_linux:8 | |
| Red Hat | Red Hat Enterprise Linux 9 | - | cpe:/o:redhat:enterprise_linux:9 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | - | cpe:/a:redhat:openshift:4 |
II. Public POCs for CVE-2026-16277
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-16277
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-16277 (1)
Vendor Advisories for CVE-2026-16277 (2)
- 🔗 2462085 – (CVE-2026-16277) CVE-2026-16277 rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() Read full article issue-trackingx_refsource_REDHAT
Other References for CVE-2026-16277 (1)
Same Patch Batch · Red Hat · 2026-07-20 · 8 CVEs total
| CVE-2026-16242 | 9.4 CRITICAL | Hypershift: konnectivity proxy-server accepts agent connections without validating client |
| CVE-2026-12701 | 9.0 CRITICAL | Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemex |
| CVE-2026-64612 | 7.5 HIGH | Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malforme |
| CVE-2026-12080 | 7.3 HIGH | Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add |
| CVE-2026-15813 | 6.5 MEDIUM | Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network pac |
| CVE-2026-15588 | 5.3 MEDIUM | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering |
| CVE-2026-16254 | 4.3 MEDIUM | Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk install |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
- CVE-2026-58216
Samba: kpasswd service: kpasswd packet that contains malform - CVE-2026-58222
Samba: samba ad ldap compare filter injection and trusted-re - CVE-2026-58218
Samba: dns signing dos via tkey name cache exhaustion - CVE-2026-16531
Pcp: pcp: arbitrary file creation via path traversal in pmpr - CVE-2026-16530
Pcp: pcp: remote denial of service and information leakage
Same vendor: Red Hat
- CVE-2026-58216
Samba: kpasswd service: kpasswd packet that contains malform - CVE-2026-58222
Samba: samba ad ldap compare filter injection and trusted-re - CVE-2026-58218
Samba: dns signing dos via tkey name cache exhaustion - CVE-2026-18382
Project-koku/koku-metrics-operator: koku-metrics-operator: s - CVE-2026-18378
Project-koku/koku-metrics-operator: koku-metrics-operator: c
Same weakness: CWE-121
- CVE-2026-10535
IBM® Db2® is vulnerable to buffer overflow in setgid helper - CVE-2026-7260
Stack overflow in phar with circular symlinks - CVE-2026-67248
A stack-based buffer overflow vulnerability was found in the - CVE-2026-13309
Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overf - CVE-2026-5056
GStreamer qtdemux Stack-based Buffer Overflow Remote Code Ex
V. Comments for CVE-2026-16277
No comments yet