CVE-2020-13949

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Summary:

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Reference Links(if available):

https://lists.apache.org/thread.html/r43dc2b2e928e9d845b07ac075634cb759d91bb852421dc282f87a74a%40%3Cdev.thrift.apache.org%3E

https://lists.apache.org/thread.html/r3a1291a7ab8ee43db87cb0253371489810877028fc6e7c68dc640926@%3Cissues.hbase.apache.org%3E

https://lists.apache.org/thread.html/r27b7d3d95ffa8498899ef1c9de553d469f8fe857640a3f6e58dba640@%3Cissues.hbase.apache.org%3E

https://lists.apache.org/thread.html/r143ca388b0c83fe659db14be76889d50b453b0ee06f423181f736933@%3Cissues.hbase.apache.org%3E

https://lists.apache.org/thread.html/r515e01a30443cfa2dbb355c44c63149869afd684fb7b0344c58fa67b@%3Cissues.hbase.apache.org%3E

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)

Tags: CVE, CVE-2020-13949, Mailing List, MISC, vulnerability

CVE-2020-13949

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Cobalt Strike Beacon Detected – 101[.]36[.]117[.]41:8880

Cobalt Strike Beacon Detected – 47[.]242[.]206[.]77:8888

Cobalt Strike Beacon Detected – 148[.]135[.]127[.]214:81

Cobalt Strike Beacon Detected – 192[.]74[.]226[.]179:8443

Cobalt Strike Beacon Detected – 180[.]184[.]42[.]11:8080

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Cobalt Strike Beacon Detected – 101[.]36[.]117[.]41:8880

Cobalt Strike Beacon Detected – 47[.]242[.]206[.]77:8888

Cobalt Strike Beacon Detected – 148[.]135[.]127[.]214:81

Cobalt Strike Beacon Detected – 192[.]74[.]226[.]179:8443

Cobalt Strike Beacon Detected – 180[.]184[.]42[.]11:8080