CVE-2020-13949
EUVD-2021-065612.02.2021, 20:15
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | hive | 𝑥 < 4.0.0 |
| apache | thrift | 0.9.3 ≤ 𝑥 ≤ 0.13.0 |
| oracle | communications_cloud_native_core_network_slice_selection_function | 1.2.1 |
| oracle | communications_cloud_native_core_policy | 1.14.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References