Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-27T11:06:17 thrift: Apache Thrift Node.js bindings: Denial of Service due to inefficient algorithmic complexity and resource allocation 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-770

Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

A flaw was found in Apache Thrift Node.js bindings. This vulnerability, stemming from inefficient algorithmic complexity and the allocation of resources without proper limits or throttling, allows a remote attacker to cause a Denial of Service (DoS). By exploiting this, an attacker can consume excessive resources, making the service unavailable to legitimate users.

This is an Important denial of service vulnerability in Apache Thrift Node.js bindings, which could allow a remote attacker to exhaust system resources due to inefficient algorithmic complexity. This flaw primarily impacts Red Hat OpenShift Container Platform components that utilize the vulnerable Thrift Node.js bindings, potentially leading to service unavailability. Confidential Compute Attestation Affected openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected thrift Red Hat OpenShift Container Platform 4 Not affected conmon-rs Red Hat OpenShift Container Platform 4 Affected kata-containers Red Hat OpenShift Update Service Affected openshift-update-service/openshift-update-service-rhel8 https://www.cve.org/CVERecord?id=CVE-2026-55968 https://nvd.nist.gov/vuln/detail/CVE-2026-55968 http://www.openwall.com/lists/oss-security/2026/07/24/39 https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9 https://lists.apache.org/thread/gxhhfyr6flr5vzr4qnxm13p6fc41qstp