Bug 2545171 (CVE-2026-83632)

Summary:	CVE-2026-83632 thrift: Apache Thrift: Denial of Service via crafted HTTP requests
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aazores, akhatavk, alinfoot, amctagga, aoconnor, aos-team-art-private, asdas, blitton, bniver, cmah, dpaolell, dtrifiro, eaguilar, ebaron, eglynn, flucifre, gbenhaim, gmeno, gparvin, groman, jbalunas, jcantril, jdelft, jjoyce, jmatsuok, jpretori, jschluet, jtolenti, jupierce, kaycoth, lchilton, lgarciaa, lhh, mbarnett, mbenjamin, mbiarnes, mburns, mgarciac, mhackett, mwringe, niyer, pjindal, ppalepu, ppostler, prdhamdh, rhaigner, rhel-process-autobot, rojacob, sfeifer, sghai, sidsharm, sostapov, suppawar, tsze, twaugh, vereddy, vlaad, watson-tool-maintainers, weaton
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service (DoS) or memory corruption by sending specially crafted network requests to services utilizing the C++ HTTP transport layer. Due to improper input validation and resource handling, these requests trigger an integer overflow and excessive memory allocation, resulting in service disruption.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2548564, 2548565
Bug Blocks:

Description OSIDB Bzimport 2026-10-02 12:58:37 UTC

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift.



This issue affects Apache Thrift: before 0.25.0.



Users are recommended to upgrade to version 0.25.0, which fixes the issue.