CyberRota Analysis
AI-GeneratedThe Apache IoTDB RPC service is vulnerable due to improper validation of length fields, allowing remote unauthenticated attackers to exploit this flaw by sending malformed Thrift frames. This can lead to a denial of service by causing excessive memory allocation, resulting in an OutOfMemoryError and crashing the service. Organizations using affected versions prior to 1.3.8 or between 2.0.0 and 2.0.9 should prioritize upgrading to version 2.0.10 to mitigate this risk.
Original NVD Description
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. This issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9. Users are recommended to upgrade to version 2.0.10, which fixes the issue.