Threats tagged 'ghsa-6rr8-5qq5-gq73'

A vulnerability in Apache Kafka allows an authenticated user with Write permission on a topic to cause an OutOfMemoryError by sending a compressed record batch with a maliciously declared decompressed body size. This can crash broker request-handler threads and consumer processes, leading to denial of service. On brokers configured with -XX:+ExitOnOutOfMemoryError, the JVM can terminate. Additionally, the log cleaner thread can be terminated permanently on compacted topics, halting log compaction and affecting broker availability until manual intervention. No data disclosure or alteration occurs.