Описание
Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
A flaw was found in Apache Thrift's THeaderTransport component. Due to a failure to release allocated memory and system resources after their operational lifetime, a remote attacker can exploit this vulnerability by sending network traffic that repeatedly consumes resources. This issue can cause system memory exhaustion, leading to a Denial of Service (DoS).
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 7 | thrift | Fix deferred | ||
| Red Hat Ceph Storage 8 | thrift | Fix deferred | ||
| Red Hat Ceph Storage 9 | thrift | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | thrift | Affected | ||
| Red Hat Hardened Images | thrift-main-0.25.0-0.1.hum1 | Fixed | RHSA-2026:74369 | 01.10.2026 |
Показывать по
Дополнительная информация
Статус:
Связанные уязвимости
Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path
Missing release of memory after effective lifetime, Missing release of ...
Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.