PT-2026-69424 · Apache · Apache Iotdb
CVE-2026-44630
·
Published
2026-08-10
·
Updated
2026-08-12
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Apache IoTDB versions prior to 1.3.8
Apache IoTDB versions 2.0.0 through 2.0.8
Description
Improper validation of length fields in the RPC service allows a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can trigger an OutOfMemoryError, causing the system to allocate excessive memory and crash.
Recommendations
Upgrade to version 2.0.10.
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Apache Iotdb