VULNERABILITY INTELLIGENCE
CVE-2026-35562
CVSS score8.7 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-04-03
Last modified2026-10-20
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations. To remediate this issue, users should upgrade to version 2.1.0.0.
Weakness classification
- CWE-770: Allocation of Resources Without Limits or Throttling
Primary references
- ff89ba41-3aa1-4d27-914a-91399e9639e5 — Vendor Advisory
- ff89ba41-3aa1-4d27-914a-91399e9639e5 — Release Notes
- ff89ba41-3aa1-4d27-914a-91399e9639e5 — Patch
- ff89ba41-3aa1-4d27-914a-91399e9639e5 — Patch
- ff89ba41-3aa1-4d27-914a-91399e9639e5 — Patch
- ff89ba41-3aa1-4d27-914a-91399e9639e5 — Patch