Lucene search
+L

98 matches found

Debian CVE
Debian CVE
•added 2026/11/07 2:51 p.m.•7 views

CVE-2026-120135

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS5.8AI score0.00553EPSS
SaveExploits0
osv_debian
osv_debian
•added 2026/10/31 9:16 p.m.•12 views

DEBIAN-CVE-2026-120135

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS5.8AI score0.00553EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/31 9:16 p.m.•20 views

CVE-2026-120135

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS0.00553EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/31 8:33 p.m.•20 views

EUVD-2026-114735

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS5.8AI score0.00553EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/31 8:33 p.m.•10 views

CVE-2026-120135

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS5.8AI score0.00553EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/31 12:00 a.m.•14 views

PT-2026-134679

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An uncontrolled recursion flaw exists in the Java bindings of Apache Thrift. Uncontrolled recursion occurs when a program calls itself repeatedly without a proper termination condition, which...

8.2CVSS5.9AI score0.00553EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/31 12:00 a.m.•14 views

CVE-2026-120135: Apache Software Foundation Apache Thrift: Uncontrolled Recursion vulnerability in Apache Thrift Java bindings

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS5.9AI score0.00553EPSS
SaveExploits0References2
osv_cleanstart
osv_cleanstart
•added 2026/10/30 9:34 a.m.•15 views

CLEANSTART-2026-RF19497 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings

Security vulnerability affects the spark-sc213-jdk17-py312 package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...

7.5CVSS7.5AI score0.0103EPSS
SaveExploits0References3
Veracode
Veracode
•added 2026/10/14 5:08 a.m.•21 views

Resource Exhaustion

Apache Thrift is vulnerable to Resource Exhaustion. The vulnerability is due to improper handling of exceptional conditions and allocation of resources without limits or throttling, where an uncaught exception in the Java bindings can cause unbounded resource consumption and allow attackers to...

8.2CVSS7.4AI score0.00342EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2026/10/14 4:55 a.m.•21 views

Resource Exhaustion

Apache Thrift is vulnerable to resource exhaustion. The vulnerability is due to unbounded allocation of resources without proper throttling, where the Java bindings perform resource allocation without limits and attackers can trigger excessive resource consumption to cause denial of service...

7.1CVSS7.5AI score0.00248EPSS
SaveExploits0References2Affected Software1
osv_bit
osv_bit
•added 2026/10/09 10:52 a.m.•22 views

BIT-THRIFT-2026-61374 Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

7.1CVSS7.4AI score0.00248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-109208

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS7.5AI score0.00342EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•11 views

PT-2026-109215

improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS7.6AI score0.0031EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•11 views

PT-2026-109171

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

7.1CVSS7.5AI score0.00248EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/10/05 4:40 p.m.•13 views

SUSE CVE-2026-61374

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

7.1CVSS7.4AI score0.00248EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-94639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java...

8.2CVSS7.5AI score0.00342EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-61374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

7.1CVSS7.5AI score0.00248EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-94651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This issue affec...

8.2CVSS7.5AI score0.0031EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/10/02 4:46 p.m.•13 views

SUSE CVE-2026-94639

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

7.5CVSS7.4AI score0.00342EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/10/02 4:46 p.m.•11 views

SUSE CVE-2026-94651

improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

7.5CVSS7.5AI score0.0031EPSS
SaveExploits0References3
Rows per page
Query Builder