A vulnerability in rpcbind allows a remote unauthenticated attacker to cause a Denial of Service (DoS) by sending many unique RPC requests. The service tracks new RPC statistics in unbounded memory lists, causing persistent memory growth and high CPU usage, which can degrade or exhaust service availability. This flaw is fixed in rpcbind version 1.2.6-9.oe2403sp4.