> CVE-2026-44630

« BACK_TO_HOME
PUBLISHED
2026-08-10 10:17
MODIFIED
2026-08-10 10:17
EPSS (Prob. Exploit)
0.59%
Top 51.8%
DATA SOURCES:
NVD 🔗 2026-08-10 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01

> DESCRIPTION

Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. This issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-400 CWE-789

> CWE DETAILED DESCRIPTIONS

CWE-400: Uncontrolled Resource Consumption - The product does not properly control the allocation and maintenance of a limited resource. | CWE-789: Memory Allocation with Excessive Size Value - The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

> HISTORIQUE DES MODIFICATIONS

Première apparition
10/08/2026 10:17
Source: NVD
📊 ENRICHISSEMENT 01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-400: Uncontrolled Resource Consumption - The product does not properly control the allocation and maintenance of a limited resource. | CWE-789: Memory Allocation with Excessive Size Value - The pr...
Total des modifications: 1 Dernière mise à jour: 2 months ago

> REFERENCES

https://lists.apache.org/thread/tfsgd9whbq79lgjvdzj44hw0fhsofly8
« BACK_TO_HOME