thrift: Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)

A flaw was found in Apache Thrift's PHP bindings. A remote attacker can exploit this issue to cause a Denial of Service DoS by sending specially crafted input. Due to inefficient algorithmic processing, handling these requests consumes disproportionate computing resources, causing the application...

thrift: Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection

A flaw was found in Apache Thrift's Node.js bindings. A remote attacker can exploit improper exception handling by triggering an uncaught exception. This failure causes the application process to crash, leading to a Denial of Service DoS...

thrift: thrift: Denial of Service via infinite loop in Python bindings

A flaw was found in Apache Thrift's Python bindings. A remote attacker could trigger an infinite loop during data processing, leading to a Denial of Service DoS. By sending specially crafted input, an attacker can cause the application to hang and consume excessive resources, making the service...

thrift: thrift: Denial of Service via infinite loop in D language bindings

A flaw was found in Apache Thrift's D language bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted input to an affected application. This input triggers an integer underflow or an unhandled exception, causing the process to enter an infini...

thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...

thrift: thrift: Denial of Service via improper length parameter handling in Lua bindings

A flaw was found in the Apache Thrift Lua bindings. A remote attacker could exploit this vulnerability by sending requests containing inconsistent length parameters, triggering excessive resource allocation without proper limits. This issue can exhaust available system memory or processing...

thrift: Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound

A flaw was found in the Apache Thrift Ruby bindings. The software does not properly restrict or throttle system resource allocation during request processing. A remote attacker could exploit this vulnerability by sending crafted requests that cause excessive resource consumption, resulting in a...

thrift: thrift: Denial of Service via uncontrolled resource allocation

A flaw was found in Apache Thrift. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted requests. Because the affected bindings fail to properly restrict resource allocation during request handling, an attacker can exhaust system resources and...

thrift: Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

A flaw was found in Apache Thrift's Erlang bindings. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted input that triggers uncontrolled recursion and unrestricted resource allocation. As a result, the application can exhaust available system...

thrift: Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound

A flaw was found in Apache Thrift's Erlang bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending requests that trigger excessive resource allocation without proper limits or throttling. This issue can lead to resource exhaustion, resulting in a Denial of Service...

apache/thrift: thrift: Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

A flaw was found in Apache Thrift's PHP bindings. A remote, unauthenticated attacker can exploit this vulnerability by sending requests that trigger unbounded resource allocation without proper limits or throttling. This failure to control consumption can exhaust system resources, resulting in a...

thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

thrift: thrift: Denial of Service via buffer overflow in PHP bindings

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...

thrift: Apache Thrift: Denial of Service via deeply nested unknown fields

A flaw was found in Apache Thrift. Multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can exploit this vulnerability by sending a message containing deeply nested unknown fields, leading to stack...

thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings

A flaw was found in Apache Thrift. A remote attacker can exploit this vulnerability by submitting specially crafted messages to applications using the Node.js bindings with TJSONProtocol. Successful exploitation can trigger an infinite loop or cause prototype pollution unintended modification of...

thrift: thrift: Denial of Service via prototype pollution in Node.js bindings

A flaw was found in Apache Thrift's Node.js bindings. Due to improper input validation and prototype pollution—a condition where base JavaScript object properties can be modified—the application fails to safely process incoming data. A remote attacker can exploit this vulnerability by sending...

thrift: thrift: Denial of Service via inefficient regular expression evaluation in Lua bindings

A flaw was found in Apache Thrift's Lua bindings. A remote attacker could exploit this vulnerability by sending specially crafted input that triggers inefficient regular expression processing. This can cause excessive resource consumption, resulting in a Denial of Service DoS on the affected...

thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS against the Node.js and D WebSocket server transports by sending a frame specifying an excessively large payload length. Because the server immediately allocates the declared amount of memory without verifying...

thrift: thrift: Man-in-the-middle attacks via improper certificate validation

A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...

thrift: thrift: Denial of Service via improper message handling in language bindings

A flaw was found in Apache Thrift. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted requests to applications utilizing affected language bindings. Flawed input parameter processing and resource allocation can trigger...