1604 matches found
Remote Code Execution (RCE)
github.com/apache/thrift is vulnerable to remote code execution RCE attacks. The vulnerability exists in formatgootuput of tgogenerator.cc where a malicious user can provide a service name which could deliver a payload that leads to RCE attacks...
Apache Thrift Go client library remote code execution vulnerability
Apache Thrift is the United States Apache Apache Software Foundation's set of remote invocation framework , which allows in the definition file to define data types and service interfaces . Go client library is one of the client library . The Go client library in Apache Thrift is vulnerable to a...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
Command injection
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
CVE-2016-5397
Concisely: CVE-2016-5397 affects the Apache Thrift Go client library. The vulnerability arises from code-generation time where an external formatting tool could allow a remote attacker to execute arbitrary commands, as described for Apache Thrift 0.9.3 and older. The issue is exploitable via Go c...
CVE-2016-5397: Improper Neutralization of Special Elements used in a Command
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
PT-2018-4929
Name of the Vulnerable Software and Affected Versions Apache Thrift versions 0.9.3 and older Description The issue arises from the use of an external formatting tool during code generation, potentially exposing the system to command injection. Recommendations For Apache Thrift versions 0.9.3 and...
thrift: Infinite recursion via vectors involving the skip function
A vulnerability was discovered in Apache Thrift client libraries that allows remote, authenticated attackers to cause an infinite recursion via vectors involving the skip function; resulting in a denial of service DoS condition...
CVE-2015-3254
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2015-3254
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
Design/Logic Flaw
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2015-3254
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...
CVE-2015-3254
Apache Thrift client libraries before 0.9.3 are affected by CVE-2015-3254, which could allow a remote authenticated user to trigger a denial of service via infinite recursion in the skip function. Impact is a partial denial of service (availability affected) with network access and no confidentia...