CVE-2020-13949

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.2.1:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "1.2.1"
                }
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_cloud_native_core_network_slice_selection_function"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "1.14.0"
                }
            ],
            "source": "CPE_FIELD",
            "vendor_product": "oracle:communications_cloud_native_core_policy"
        }
    ]
}

References

Affected packages

Git / github.com/apache/hive

Affected ranges

Type

GIT

Repo

https://github.com/apache/hive

Events

Introduced

Fixed

183f8cb41d3dbed961ffd27999876468ff06690c

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.0.0"
        }
    ],
    "source": "CPE_FIELD",
    "cpe": "cpe:2.3:a:apache:hive:*:*:*:*:*:*:*:*"
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13949.json"

Git / github.com/apache/thrift

Affected ranges

Type

GIT

Repo

https://github.com/apache/thrift

Events

Introduced

53dd39833a08ce33582e5ff31fa18bb4735d6731

Last affected

cecee50308fc7e6f77f55b3fd906c1c6c471fa2f

Database specific

{
    "extracted_events": [
        {
            "introduced": "0.9.3"
        },
        {
            "last_affected": "0.13.0"
        }
    ],
    "source": "CPE_FIELD",
    "cpe": "cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*"
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13949.json"