一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月17日

CVE-2026-85231 [MEDIUM] – A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerab

未分类
📑 文章目录

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.