USN-4986-3
rpcbind regression
USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.
What each source reports
OSV No score
rpcbind regression
USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.
- Record
USN-4986-3- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rpcbindUbuntu:18.04:LTS |
before 0.2.3-0.6ubuntu0.18.04.3, plus listed versions 0.2.3-0.60.2.3-0.6ubuntu0.18.04.10.2.3-0.6ubuntu0.18.04.2 |
0.2.3-0.6ubuntu0.18.04.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4986-3 is a vulnerability with no CVSS score yet in rpcbind, published June 10, 2021. No source lists public exploit code. Fixed in rpcbind 0.2.3-0.6ubuntu0.18.04.3.