Bug 2545152 (CVE-2026-94637)
| Summary: | CVE-2026-94637 github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | aazores, akhatavk, alinfoot, amctagga, aoconnor, aos-team-art-private, asdas, blitton, bniver, cmah, dpaolell, dtrifiro, eaguilar, ebaron, eglynn, flucifre, gbenhaim, gmeno, gparvin, groman, jbalunas, jcantril, jdelft, jjoyce, jmatsuok, jpretori, jschluet, jtolenti, jupierce, kaycoth, lchilton, lgarciaa, lhh, mbarnett, mbenjamin, mbiarnes, mburns, mgarciac, mhackett, mwringe, niyer, pjindal, ppalepu, ppostler, prdhamdh, rhaigner, rhel-process-autobot, rojacob, sfeifer, sghai, sidsharm, sostapov, suppawar, tsze, twaugh, vereddy, vlaad, watson-tool-maintainers, weaton |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leading to a Denial of Service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2546845, 2546849 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-02 12:33:17 UTC
|