1541 matches found
apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory path traversal, and improper neutralization of CRLF sequences in HTTP headers HTTP request/response splitting. A remote attacker could exploit...
apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory path traversal, and improper neutralization of CRLF sequences in HTTP headers HTTP request/response splitting. A remote attacker could exploit...
RHEL 9 : opentelemetry-collector (RHSA-2026:53412)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53412 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...
Loop With Unreachable Exit Condition
Apache Thrift is vulnerable to a Loop with Unreachable Exit Condition. The vulnerability is due to an improperly controlled loop condition that can cause the affected Thrift bindings to enter an infinite loop, which allows an attacker to trigger excessive resource consumption...
CVE-2026-48145
A flaw was found in Apache Thrift C++ bindings. This vulnerability, caused by improper validation of certificates with host mismatch, could allow a remote attacker to disclose sensitive information. Mitigation To mitigate this issue, restrict network access to systems utilizing Apache Thrift C++...
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit
...
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
...
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()
...
Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport
...
Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()
...
Apache Thrift: Python TSSLSocket Hostname Matcher Import
...
Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass
...
Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
...
Apache Thrift: c_glib TLS Client Missing Hostname Verification
...
Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()
...
Inefficient Algorithmic Complexity
Apache Thrift is vulnerable to Inefficient Algorithmic Complexity. The vulnerability is due to Allocation of Resources Without Limits or Throttling, where an attacker can exploit the issue by causing the application to consume excessive resources, and this can lead to a denial-of-service conditio...
Denial Of Service (DoS)
Apache Thrift Ruby bindings are vulnerable to Denial Of Service. The vulnerability is due to improper handling of highly compressed data, where crafted compressed input can cause excessive data amplification and resource consumption, leading to application unavailability...
CLSA-2026-1775003187 TuxCare security update for org.apache.thrift (1 CVE)
TuxCare rebuilt 2 org.apache.thrift packages to address 1 CVE. Fixed in 0.9.1-tuxcare.4...