Remote Code Execution Vulnerability in libtirpc Affecting Red Hat Systems
CVE-2026-85977

5.3MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
16 October 2026

What is CVE-2026-85977?

A vulnerability exists in libtirpc that allows a remote attacker to exploit the pmap_getmaps() function. By sending specially crafted PMAPPROC_DUMP replies from a malicious host, an attacker can trigger unbounded decoding. This results in excessive memory and CPU consumption, potentially leading the client process to succumb to a Denial of Service due to resource exhaustion, rendering the service unavailable.

References

https://access.redhat.com/security/cve/CVE-2026-85977
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2478979
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Found by AISLE in partnership with Red Hat.
.