CVE-2026-66054
2026-10-02
13h17 +00:00
13h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++ bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Handling of Highly Compressed Data (Data Amplification) The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output. |
||
| Allocation of Resources Without Limits or Throttling The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
