Описание
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| thrift | fixed | 0.16.0-1 | experimental | package |
| thrift | fixed | 0.16.0-3 | package | |
| thrift | no-dsa | bullseye | package | |
| thrift | no-dsa | buster | package |
Примечания
https://seclists.org/oss-sec/2021/q1/140
EPSS
Связанные уязвимости
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
Uncontrolled Resource Consumption in Apache Thrift
Уязвимость библиотеки Apache Thrift прикладного программного обеспечения Аврора Центр, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
EPSS