CVE-2010-2061: Rpcbind Project Rpcbind

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started.

Affected products

• Rpcbind Project Rpcbind: version 0.2.0 only

Published 2019-10-29. Last modified 2026-06-16.