Lucene search
+L

6 matches found

osv_bit
osv_bit
•added 2026/10/09 10:53 a.m.•19 views

BIT-THRIFT-2026-96287 Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS5.9AI score0.00426EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/02 12:05 p.m.•43 views

CVE-2026-96287 Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS0.00426EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/02 12:05 p.m.•13 views

CVE-2026-96287 Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS5.9AI score0.00426EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/10/01 6:16 a.m.•4 views

thrift: Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

A flaw was found in the Apache Thrift Perl bindings. A remote attacker could exploit this vulnerability by sending specially crafted input to an application using the affected bindings. This triggers inefficient data processing, leading to excessive resource consumption and a Denial of Service Do...

8.2CVSS5.8AI score0.00426EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/05/06 1:54 p.m.•36 views

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.3 release

Red Hat build of OpenTelemetry 3.9.3 has been released This release of the Red Hat build of OpenTelemetry provides security improvements. Breaking changes: None Deprecations: None Technology Preview features: None Enhancements: None Bug fixes: TOCTOU race condition in libcap capsetfile function i...

7.5CVSS6.9AI score0.01163EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•25 views

PT-2026-35699

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description An integer overflow or wraparound issue exists in the Go language implementation of the TFramedTransport component in Apache Thrift. An integer overflow occurs when an arithmetic operation...

7.8CVSS7.2AI score0.01163EPSS
SaveExploits0
Rows per page
Query Builder