{"id":"CVE-2026-44630","aliases":["EUVD-2026-55157","GHSA-q69g-x875-pprm"],"status":"published","title":"Apache IoTDB: RPC service denial of service via unchecked Thrift string length","description":"Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.0059,"percentile":0.48492,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400","CWE-789"],"published":"2026-08-10T09:25:11Z","modified":"2026-10-23T20:10:00Z","products":[{"vendor":"apache software foundation","product":"apache iotdb"}],"references":[{"url":"https://lists.apache.org/thread/tfsgd9whbq79lgjvdzj44hw0fhsofly8","tags":["vendor-advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/08/10/1"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44630"},{"url":"https://github.com/advisories/GHSA-q69g-x875-pprm"}],"sources":{"cve":[{"id":"CVE-2026-44630","title":"Apache IoTDB: RPC service denial of service via unchecked Thrift string length","description":"Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.","status":"published","published":"2026-08-10T09:25:11.899Z","modified":"2026-08-12T15:54:05.223Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-789","CWE-400"],"updated_at":"2026-11-02T13:42:49.132798Z"}],"euvd":[{"id":"EUVD-2026-55157","description":"Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.","status":"published","published":"2026-08-10T09:25:11Z","modified":"2026-08-12T15:54:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:58.302106Z"}],"ghsa":[{"id":"GHSA-q69g-x875-pprm","title":"Improper validation of length fields in the Apache IoTDB RPC service may allow a remote...","description":"Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.","status":"published","published":"2026-08-10T12:31:50Z","modified":"2026-08-12T18:31:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:10:22.744469Z"}],"nvd":[{"id":"CVE-2026-44630","description":"Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.","status":"published","published":"2026-08-10T10:17:32.483Z","modified":"2026-10-23T20:10:00.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400","CWE-789"],"updated_at":"2026-11-02T14:12:35.743275Z"}]}}