git: rpcinfo(8): Fix stack buffer overflow in rpcbaddrlist()

[Aaron LI]

commit 41a496c2f4cdc254824e6c3d6c05bf50d195a59d
Author: Aaron LI <aly at aaronly.me>
Date:   Sat Jul 25 12:16:42 2026 +0800

    rpcinfo(8): Fix stack buffer overflow in rpcbaddrlist()
    
    rpcinfo's rpcbaddrlist() formats two server-controlled, unbounded XDR
    strings into a fixed 128-byte stack buffer with sprintf(). A malicious
    or on-path rpcbind server overflows it when a user runs:
    $ rpcinfo -l <host> <prognum> <versnum>
    
    Obtained-from: https://git.linux-nfs.org/?p=steved/rpcbind.git;a=commitdiff;h=bb9bb7286a4c345442946dc2ce3c9e7f67e96d4d
    CVE: CVE-2026-16277
    Openwall: CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo
    	(https://www.openwall.com/lists/oss-security/2026/07/23/8)

Summary of changes:
 usr.bin/rpcinfo/rpcinfo.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/41a496c2f4cdc254824e6c3d6c05bf50d195a59d


-- 
DragonFly BSD source repository