CVE-2026-35562CWE-770denial-of-service

CVE-2026-35562

High · published April 4, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations.

To remediate this issue, users should upgrade to version 2.1.0.0.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00684 · 52.0th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-04-04T01:17Z
Affected products (1)
ProductVersionsFixed in
amazon/athena_odbc< 2.1.0.02.1.0.0
References (6)
https://aws.amazon.com/security/security-bulletins/2026-013-aws/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 03 APR 20:10Z
    Allocation of resources without limits in parsing components in Amazon Athena ODBC driver
    cvelistv5