Apache Kafka DoS via unbounded allocation on compressed batches (CVE-2026-114349)
Brokers from 0.11.0.0 through the listed 4.3.1 builds allocate an attacker-chosen buffer before validating decompressed data.
1 stories, newest first · one card per story
Brokers from 0.11.0.0 through the listed 4.3.1 builds allocate an attacker-chosen buffer before validating decompressed data.
Today 840 readers · 1.1K views · 843 reads · all time 159K views