A vulnerability in rpcbind allows a remote unauthenticated attacker to cause a Denial of Service (DoS) by sending many unique RPC requests. The service tracks unseen RPC statistics in unbounded memory lists, causing persistent memory growth and high CPU usage, which can degrade or exhaust service availability. A fix is available in version 1.2.6-9.oe2203sp4.