A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage. This can degrade or exhaust service availability.

redhat RHSA-2026:83562: RHSA-2026:83562: rpcbind security update (Important)

centos_stream rpcbind-1.2.6-8.el9: rpcbind-1.2.6-8.el9

The version of rpcbind installed on the remote host is prior to 0.2.0-45. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3972 advisory.

    A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a     Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records     previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to     persistent memory growth and increased CPU usage. This can degrade or exhaust service availability.
    (CVE-2026-94640)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3169 advisory.

    A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind     service with `rpcinfo -l`, address information returned by the server is copied into a fixed-size buffer     without sufficient bounds checking. A malicious or compromised rpcbind server could use this flaw to crash     the rpcinfo client, resulting in a denial of service. The highest threat from this vulnerability is to     system availability. (CVE-2026-16277)

    A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by     `rpcinfo -s`), version numbers from a remote RPCBPROC_DUMP reply are written into a fixed-size stack     buffer without bounds checking. A user or administrator who runs `rpcinfo -s` against a malicious or     compromised rpcbind endpoint could experience a crash or denial of service of the rpcinfo client.
    (CVE-2026-16461)

    A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a     Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records     previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to     persistent memory growth and increased CPU usage. This can degrade or exhaust service availability.
    (CVE-2026-94640)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1070 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-94640:
    A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a     Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records     previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to     persistent memory growth and increased CPU usage. This can degrade or exhaust service availability.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4568-1 advisory.

    - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting     (bsc#1272340).
    - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote     denial of service       (bsc#1282326).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4446-1 advisory.

    This update for rpcbind fixes the following issue:

    - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote     denial of service       (bsc#1282326).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:23946-1 advisory.

    This update for rpcbind fixes the following issue:

    - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote     denial of service       (bsc#1282326).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21975-1 advisory.

    This update for rpcbind fixes the following issue:

    - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote     denial of service       (bsc#1282326).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a     Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records     previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to     persistent memory growth and increased CPU usage. This can degrade or exhaust service availability.
    (CVE-2026-94640)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365228	Amazon Linux 2 : rpcbind (ALAS-2026-3972)	Nessus	Amazon Linux Local Security Checks	Local	high
365181	Amazon Linux 2023 : rpcbind (ALAS2023-2026-3169)	Nessus	Amazon Linux Local Security Checks	Local	high
365163	TencentOS Server 4: rpcbind (TSSA-2026:1070)	Nessus	Tencent Local Security Checks	Local	high
364328	SUSE SLED15 / SLES15 Security Update : rpcbind (SUSE-SU-2026:4568-1)	Nessus	SuSE Local Security Checks	Local	high
363092	SUSE SLES12 Security Update : rpcbind (SUSE-SU-2026:4446-1)	Nessus	SuSE Local Security Checks	Local	high
362570	SUSE SLES16 Security Update : rpcbind (SUSE-SU-2026:23946-1)	Nessus	SuSE Local Security Checks	Local	high
362526	openSUSE 16 Security Update : rpcbind (openSUSE-SU-2026:21975-1)	Nessus	SuSE Local Security Checks	Local	high
348741	Linux Distros Unpatched Vulnerability : CVE-2026-94640	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-94640

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high