Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-94653

Опубликовано: 02 окт. 2026
Источник: redhat
EPSS Низкий

Описание

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

A flaw was found in Apache Thrift's PHP bindings. A remote attacker can exploit this issue to cause a Denial of Service (DoS) by sending specially crafted input. Due to inefficient algorithmic processing, handling these requests consumes disproportionate computing resources, causing the application to become unresponsive.

Дополнительная информация

Статус:

Important
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=2545156thrift: Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)

EPSS

Процентиль: 36%
0.00426
Низкий

Связанные уязвимости

ubuntu
22 дня назад

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

nvd
22 дня назад

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

msrc
18 дней назад

Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)

debian
22 дня назад

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP ...

github
22 дня назад

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

EPSS

Процентиль: 36%
0.00426
Низкий