EUVD-2026-36123
GHSA-m3px-q5gj-j9x7
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Triggered by a single unauthenticated network frame from a broker-positioned attacker; pure availability impact (OOM or hung connection), no confidentiality or integrity loss, no scope change.
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
6Blast Radius
ecosystem impact- 90 pypi packages depend on kafka-python (74 direct, 16 indirect)
Ecosystem-wide dependent count for version 2.3.2.
DescriptionCVE.org
kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds validation. Attackers can send a specially crafted frame length through the receive_bytes() function to trigger either a multi-gigabyte memory allocation or an uncaught ValueError that leaves the connection in a broken state, causing requests to hang and consumers to stop heartbeating until restart.
Articles & Coverage 2
AnalysisAI
Denial of service in the kafka-python client library (versions prior to 2.3.2) allows a malicious Kafka broker or man-in-the-middle attacker to exhaust client memory or wedge connections by sending a crafted 4-byte frame length header. The protocol parser's receive_bytes() function performs no bounds check on the declared frame size, leading to multi-gigabyte allocations or uncaught ValueError exceptions that stop consumer heartbeats. No public exploit identified at time of analysis; reported by VulnCheck with an upstream patch already merged.
Technical ContextAI
kafka-python is the pure-Python client library for Apache Kafka maintained by Dana Powers (dpkp/kafka-python). The root cause is CWE-789 (Memory Allocation with Excessive Size Value): KafkaProtocol.receive_bytes() in kafka/protocol/parser.py reads the first 4 bytes of each wire frame as a big-endian length prefix and then attempts to buffer that many bytes without validating the value against any ceiling. A hostile peer can therefore declare any value up to 2^31 bytes (~2 GB), triggering either a runaway allocation or, when the negative/oversized path is hit, a bare ValueError that the connection state machine does not recover from - leaving in-flight requests dangling and consumer group heartbeats blocked. The fix introduces an InvalidReceiveError class and a _validate_frame_size() helper gated by a new receive_message_max_bytes configuration knob (default 1 MB at the connection layer, 100 MB at the parser).
RemediationAI
Vendor-released patch: upgrade kafka-python to 2.3.2 or later, which adds bounds checking in KafkaProtocol.receive_bytes() via _validate_frame_size() and exposes a configurable receive_message_max_bytes ceiling (default 1 MB at the connection layer). The fix commit is https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b. If immediate upgrade is not possible, compensating controls are limited because the parser code path is reached on every inbound frame: enforce TLS with broker certificate verification on all client connections to remove the man-in-the-middle vector (trade-off: requires PKI setup and slight CPU overhead), restrict clients to connect only to brokers in trusted network segments via egress firewalling (trade-off: breaks multi-region/SaaS Kafka topologies), and add process-level memory limits (cgroups, ulimit -v, Kubernetes resource limits) so that a runaway allocation kills and restarts the consumer rather than starving the host (trade-off: still causes a DoS, just a contained one). Once on 2.3.2, consider lowering receive_message_max_bytes below the 1 MB default if your workload's legitimate message sizes are smaller.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| openSUSE Tumbleweed | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today