85 matches found
Input validation
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data...
CVE-2019-0210
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data...
CVE-2019-0210
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data...
CVE-2019-0210: Out-of-bounds Read
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data...
PT-2019-5801
Name of the Vulnerable Software and Affected Versions Apache Thrift versions 0.9.3 through 0.12.0 Description The issue is related to insufficient input validation in the Apache Thrift library, which can lead to a denial of service attack. When a server implemented in Go using TJSONProtocol or...