VYPR
High severityNVD Advisory· Published Feb 12, 2021· Updated Aug 4, 2024

CVE-2020-13949

CVE-2020-13949

Description

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.thrift:libthriftMaven
>= 0.9.3, < 0.14.00.14.0

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

215

News mentions

1