In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: apache
Published: 2021-02-12T19:39:09
Updated: 2024-08-04T12:32:14.429Z
Reserved: 2020-06-08T00:00:00
Link: CVE-2020-13949
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-02-12T20:15:13.300
Modified: 2024-11-21T05:02:12.787
Link: CVE-2020-13949
Redhat