Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-27T11:05:07 thrift: Apache Thrift Ruby bindings: Denial of Service via improper handling of highly compressed data 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-409

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

A flaw was found in Apache Thrift Ruby bindings. This vulnerability, categorized as improper handling of highly compressed data, allows a remote attacker to cause a denial of service (DoS) through a data amplification attack. By sending specially crafted highly compressed data, an attacker can exhaust system resources, making the service unavailable to legitimate users.

This Important vulnerability in Apache Thrift Ruby bindings could allow a remote, unauthenticated attacker to trigger a denial of service. By sending specially crafted compressed data, an attacker can cause excessive resource consumption, leading to service unavailability in affected Red Hat products that utilize these bindings, such as OpenShift Container Platform components. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Confidential Compute Attestation Affected openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected thrift Red Hat OpenShift Container Platform 4 Not affected conmon-rs Red Hat OpenShift Container Platform 4 Affected kata-containers Red Hat OpenShift Update Service Affected openshift-update-service/openshift-update-service-rhel8 https://www.cve.org/CVERecord?id=CVE-2026-49158 https://nvd.nist.gov/vuln/detail/CVE-2026-49158 http://www.openwall.com/lists/oss-security/2026/07/24/38 https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9 https://lists.apache.org/thread/fmjl8l415tj9zwlob8v2dr5hq1d0hts7