git: DragonFly_RELEASE_6_4 rpcinfo(8): Fix stack buffer overflow in rpcbaddrlist()

[Aaron LI]

commit f7502a8d6016aa962a5649e80978367d4e714c47
Author: Aaron LI <aly at aaronly.me>
Date:   Sat Jul 25 12:16:42 2026 +0800

    rpcinfo(8): Fix stack buffer overflow in rpcbaddrlist()
    
    rpcinfo's rpcbaddrlist() formats two server-controlled, unbounded XDR
    strings into a fixed 128-byte stack buffer with sprintf(). A malicious
    or on-path rpcbind server overflows it when a user runs:
    $ rpcinfo -l <host> <prognum> <versnum>
    
    Obtained-from: https://git.linux-nfs.org/?p=steved/rpcbind.git;a=commitdiff;h=bb9bb7286a4c345442946dc2ce3c9e7f67e96d4d
    CVE: CVE-2026-16277
    Openwall: CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo
    	(https://www.openwall.com/lists/oss-security/2026/07/23/8)

Summary of changes:
 usr.bin/rpcinfo/rpcinfo.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/f7502a8d6016aa962a5649e80978367d4e714c47


-- 
DragonFly BSD source repository