Lucene search
+L

31 matches found

Kitploit
Kitploit
added 2026/08/27 4:12 a.m.2 views

gobee

gobee Пишите свои BPF-программы на Go, а не на C. gobee транслирует строгое подмножество Go в BPF C, генерирует типизированные Go-привязки для пользовательской стороны и проверяет загрузку на соответствие версии работающего ядра. Экосистема Go имеет надежные пользовательские инструменты для BPF. ...

5.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/04 12:36 p.m.10 views

CVE-2026-43871

A flaw was found in Apache Thrift, affecting its Python, Go, PHP, and Java components. This vulnerability, known as an 'Infinite Loop', could allow a remote attacker to disrupt service availability. By exploiting this flaw, an attacker can trigger a continuous loop, leading to a denial of service...

8.7CVSS5.5AI score0.00607EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/07/28 5:15 p.m.8 views

SUSE CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/28 9:08 a.m.9 views

BIT-THRIFT-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/27 12:16 p.m.3 views

AZL-94317 CVE-2026-55969 affecting package telegraf 1.31.0-28

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00645EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/27 12:16 p.m.5 views

AZL-94232 CVE-2026-55969 affecting package kata-containers-cc 3.15.0.aks0-16

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00645EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/27 12:16 p.m.15 views

CVE-2026-55969

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS0.00645EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/27 12:16 p.m.5 views

AZL-94329 CVE-2026-43871 affecting package vitess for versions less than 19.0.4-12

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/27 12:16 p.m.5 views

AZL-94220 CVE-2026-43871 affecting package influxdb 2.7.5-19

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/27 12:16 p.m.5 views

AZL-94163 CVE-2026-43871 affecting package kata-containers-preview 3.27.0~preview2-1

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/27 11:07 a.m.59 views

CVE-2026-55969

Apache Thrift contains an Integer Overflow in TProtocol::checkReadBytesAvailable() affecting multiple bindings (C++, c_glib, Go, netstd, Delphi, Haxe) and all releases prior to 0.24.0. The issue is triggered via improper read byte count checks, potentially impacting availability. A fix is provide...

8.7CVSS5.8AI score0.00645EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/27 11:07 a.m.9 views

CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00645EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 11:07 a.m.8 views

CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score
SaveExploits0References9
Snyk
Snyk
added 2026/07/27 11:02 a.m.14 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview thrift is a Python bindings package for Apache Thrift. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the TZlibTransport read paths in the C++, Java, Python, and Go bindings. An attacker can exhaust memory or trigger...

8.7CVSS5.6AI score0.00632EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/27 11:02 a.m.12 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the TZlibTransport read paths in the C++, Java, Python, and Go bindings. An attacker can exhaust memory or trigger a denial of service by sending a small zlib-compressed...

8.7CVSS5.6AI score0.00632EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 10:56 a.m.8 views

CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/07/27 10:56 a.m.9 views

CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/27 10:56 a.m.70 views

CVE-2026-43871

The CVE-2026-43871 entry describes a vulnerability in Apache Thrift bindings for Python, Go, PHP, and Java caused by an infinite loop due to a loop with an unreachable exit condition in TCompactProtocol varint byte-count handling. Affects Thrift versions before 0.24.0; remedy is upgrading to 0.24...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/07/27 10:56 a.m.13 views

CVE-2026-43871

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.00607EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/27 12:00 a.m.21 views

PT-2026-64882

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data leads to a data amplification issue in the C++, Java, Python, Go, D, and C/GLib bindings. This occurs within the TZlibTransport decompression proces...

9.8CVSS5.7AI score0.00632EPSS
SaveExploits0References31
Rows per page
Query Builder