CVEs-PoC/2020/CVE-2020-13949.md

CVE-2020-13949

Description

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

POC

Reference

• https://www.oracle.com//security-alerts/cpujul2021.html
• https://www.oracle.com/security-alerts/cpujan2022.html

Github

• https://github.com/k1LoW/oshka