1526 matches found
Security Bulletin: IBM Security Guardium is affected by a Using Components (lib) with Known Vulnerabilities vulnerability
Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2015-3254 DESCRIPTION: Apache Thrift is vulnerable to a denial of service, caused by an error in the client libraries. A remote authenticated attacker could exploit this vulnerability to...
PT-2018-2890
Name of the Vulnerable Software and Affected Versions Apache Thrift Node.js versions 0.9.2 through 0.11.0 Description The issue allows a remote user to access files outside the set web server's docroot path due to a security vulnerability in the Apache Thrift Node.js static web server. This...
Remote Code Execution (RCE)
github.com/apache/thrift is vulnerable to remote code execution RCE attacks. The vulnerability exists in formatgootuput of tgogenerator.cc where a malicious user can provide a service name which could deliver a payload that leads to RCE attacks...
Apache Thrift Go client library remote code execution vulnerability
Apache Thrift is the United States Apache Apache Software Foundation's set of remote invocation framework , which allows in the definition file to define data types and service interfaces . Go client library is one of the client library . The Go client library in Apache Thrift is vulnerable to a...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
Command injection
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
Concisely: CVE-2016-5397 affects the Apache Thrift Go client library. The vulnerability arises from code-generation time where an external formatting tool could allow a remote attacker to execute arbitrary commands, as described for Apache Thrift 0.9.3 and older. The issue is exploitable via Go c...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397: Improper Neutralization of Special Elements used in a Command
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
PT-2018-4929
Name of the Vulnerable Software and Affected Versions Apache Thrift versions 0.9.3 and older Description The issue arises from the use of an external formatting tool during code generation, potentially exposing the system to command injection. Recommendations For Apache Thrift versions 0.9.3 and...
thrift: Infinite recursion via vectors involving the skip function
A vulnerability was discovered in Apache Thrift client libraries that allows remote, authenticated attackers to cause an infinite recursion via vectors involving the skip function; resulting in a denial of service DoS condition...
Design/Logic Flaw
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2015-3254
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...