LY Corporation Armeria excessive memory allocation on malformed Thrift messages (denial of service)
A Java server tool can use up too much memory and stop.
Summary
Sending malformed Thrift messages can make Armeria allocate excessive memory, which can stop the service. Versions prior to 1.43.0 are affected.
Affected when
- Armeria service that processes Thrift messages
What to do
Update to Armeria 1.43.0 or newer.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen