Denial Of Service (DoS)

Apache Fluss is vulnerable to Denial Of Service DoS. The vulnerability is due to configuring Netty's LengthFieldBasedFrameDecoder with an excessively large maximum frame length, which allows an unauthenticated remote attacker to send crafted frame headers and exhaust JVM heap memory on the...