USN-4986-4
rpcbind regression
USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.
What each source reports
OSV No score
rpcbind regression
USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that rpcbind incorrectly handled certain large data sizes. A remote attacker could use this issue to cause rpcbind to consume resources, leading to a denial of service.
- Record
USN-4986-4- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rpcbindUbuntu:Pro:14.04:LTS |
before 0.2.1-2ubuntu2.2+esm2, plus listed versions 0.2.0-8.2ubuntu20.2.1-2ubuntu10.2.1-2ubuntu2.10.2.1-2ubuntu2.20.2.1-2ubuntu2.2+esm1 |
0.2.1-2ubuntu2.2+esm2 |
rpcbindUbuntu:Pro:16.04:LTS |
before 0.2.3-0.2ubuntu0.16.04.1+esm2, plus listed versions 0.2.1-6ubuntu40.2.3-0.20.2.3-0.2ubuntu0.10.2.3-0.2ubuntu0.16.04.10.2.3-0.2ubuntu0.16.04.1+esm1 |
0.2.3-0.2ubuntu0.16.04.1+esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4986-4 is a vulnerability with no CVSS score yet in rpcbind, published June 10, 2021. No source lists public exploit code. Fixed in rpcbind 0.2.1-2ubuntu2.2+esm2.