| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.thrift:libthrift | ≥ 0.9.3, < 0.14.0 | 0.14.0 |
| hive | < 4.0.0 | 4.0.0 |
| thrift | ≥ 0.9.3, ≤ 0.13.0 | |
| communications cloud native core network slice selection function | = 1.2.1 | |
| communications cloud native core policy | = 1.14.0 |
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free