CVE-2026-66054: Apache Software Foundation Apache Thrift, отказ на

Описание

Оригинално описание

Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Засегнати продукти

• Apache Software Foundation Apache Thrift: преди 0.25.0

Вид слабост

• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-409 Неправилна обработка на силно компресирани данни (усилване на данни)

История

Други уязвимости в Apache Software Foundation Apache Thrift

• 8.2CVE-2026-120135
• 7.1CVE-2026-61374
• 8.7CVE-2026-63772
• 8.2CVE-2026-66055
• 8.7CVE-2026-66081

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-66054
• https://nvd.nist.gov/vuln/detail/CVE-2026-66054
• https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1
• https://lists.apache.org/thread/7c23sgowkb3ssmolqofqsn8wzsddvf33