CVE:CVE-2020-13949
CNNVD:CNNVD-202102-1099
Apache Thrift是美国阿帕奇（Apache）基金会的一个用于跨平台开发的框架。
Apache Thrift 0.9.3 to 0.13.0 存在资源管理错误漏洞，该漏洞源于恶意RPC客户机可能会发送短消息，这将导致大量的内存分配，拒绝服务。
solution:Upgrade apache hive to a higher version than 4.0.0,and avoid the version (,4.0.0); Upgrade apache thrift to a higher version than 0.13.0,and avoid the version [0.9.3,0.13.0]; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0