All CVEs — page 347 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability occurs when Apache Thrift's Java bindings fail to properly release resources after handling exceptional conditions, leading to resource leaks that can accumulate over time and eventually cause system instability or denial of service. The flaw is particularly concerning because it can lead to uncontrolled resource consumption without any explicit error reporting.
Apache Thrift bindings are vulnerable to memory exhaustion and unhandled exceptions due to improper handling of length parameters and inefficient algorithms, potentially leading to denial of service.
The flaw allows unauthenticated attackers to exfiltrate password-reset URLs, potentially leading to account takeovers.