Apache Iotdb Jdbc Driver
Monthly
Uncontrolled resource consumption in the IoTDB JDBC Driver (versions 1.3.3 through 2.0.10) can let attacker-influenced database responses or endpoints exhaust resources in the client application that integrates the driver, degrading or denying availability on that host. The flaw is client-side, so exposure requires an application to use the affected driver to establish IoTDB connections; the Apache advisory does not name the exact triggering feature. No public exploit code or CISA KEV entry was identified at time of analysis, and the assessed impact is limited to availability (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
Uncontrolled resource consumption in the IoTDB JDBC Driver (versions 1.3.3 through 2.0.10) can let attacker-influenced database responses or endpoints exhaust resources in the client application that integrates the driver, degrading or denying availability on that host. The flaw is client-side, so exposure requires an application to use the affected driver to establish IoTDB connections; the Apache advisory does not name the exact triggering feature. No public exploit code or CISA KEV entry was identified at time of analysis, and the assessed impact is limited to availability (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).