CVE-2017-8779

CVE-2017-8779 is a denial-of-service vulnerability affecting rpcbind, LIBTIRPC, and NTIRPC versions through 0.2.4, 1.0.1/1.0.2-rc3, and 1.4.3 respectively. It arises from improper memory allocation for XDR strings, allowing remote attackers to exhaust memory via crafted UDP packets to port 111. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity and no user interaction, leading to a complete denial of service. While not listed in CISA KEV, public exploit code exists, including a Metasploit module and an ExploitDB entry, indicating its potential for active exploitation. Despite this, there is minimal community discussion or media coverage.