GHSA-g2fg-mr77-6vrmHighCVSS 7.5

Uncontrolled Resource Consumption in Apache Thrift

Published
March 12, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-13949 →

📋 Description

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

🎯 Affected products1

  • maven/org.apache.thrift:libthrift:>= 0.9.3, < 0.14.0

🔗 References (111)