thrift: thrift: Denial of Service via excessive memory allocation

A flaw was found in Apache Thrift. Multiple language bindings fail to properly restrict memory allocation when processing input containing excessive size values. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted requests, consuming available memory and...

thrift: thrift: Denial of Service via integer underflow in THeaderTransport

A flaw was found in Apache Thrift. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted network traffic to an affected application. Due to an integer underflow in the 32-bit C++ THeaderTransport component, processing this malformed data triggers an...

thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end

A flaw was found in Apache Thrift's C GLib bindings. Due to the use of an uninitialized resource and improper status code handling during request processing, the application can enter an inconsistent state. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS or...

thrift: thrift: Denial of Service via infinite loop in D language bindings

A flaw was found in Apache Thrift's D language bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted input to an affected application. This input triggers an integer underflow or an unhandled exception, causing the process to enter an infini...

thrift: Apache Thrift: C++ WebSocket server transport does not read a full request length

A flaw was found in Apache Thrift. The C++ WebSocket server mishandles uninitialized resources and returns an incorrect status code when processing requests. Under specific conditions, a remote attacker could exploit this vulnerability to trigger improper application states and compromise system...

thrift: thrift: Denial of Service via stack-based buffer overflow in THeaderProtocol

A flaw was found in Apache Thrift. An incorrect bitwise integer shift in the C++ THeaderProtocol implementation can cause a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input, resulting in a Denial of Service DoS...

thrift: Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

A flaw was found in Apache Thrift's Python bindings. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by sending specially crafted input or compressed payloads. Due to improper input validation and improper handling of compressed data, processing these...

thrift: thrift: Denial of Service via prototype pollution in Node.js bindings

A flaw was found in Apache Thrift's Node.js bindings. Due to improper input validation and prototype pollution—a condition where base JavaScript object properties can be modified—the application fails to safely process incoming data. A remote attacker can exploit this vulnerability by sending...

thrift: thrift: Denial of Service via improper resource allocation in JavaME bindings

A flaw was found in Apache Thrift. A remote attacker could exploit improper resource allocation controls in the JavaME bindings to cause a Denial of Service DoS. By sending requests that trigger unbounded resource consumption, an attacker can exhaust system resources and make the service...

thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by triggering an application crash due to improper memory handling in the C GLib bindings. This vulnerability stems from an uninitialized variable and a null pointer dereference during data processing...

thrift: thrift: Man-in-the-middle attacks via improper certificate validation

A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...

thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 0

A flaw was found in Apache Thrift. A remote attacker could cause a Denial of Service DoS by sending specially crafted input to an application using the C GLib bindings. Processing this malformed data triggers an infinite loop, consuming system resources and causing the application to become...

thrift: thrift: Prototype pollution in JavaScript bindings

A flaw was found in Apache Thrift's JavaScript bindings. An unauthenticated remote attacker can exploit a prototype pollution vulnerability—where shared JavaScript object definitions are modified—by sending specially crafted input to an application using the affected bindings. Successful...

thrift: thrift: Denial of Service via memory leak in THeaderTransport

A flaw was found in Apache Thrift's THeaderTransport component. Due to a failure to release allocated memory and system resources after their operational lifetime, a remote attacker can exploit this vulnerability by sending network traffic that repeatedly consumes resources. This issue can cause...

thrift: Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default

A flaw was found in the Apache Thrift Python bindings, which can lead to a Denial of Service DoS. Due to insecure default settings and a lack of limits or throttling on resource allocation, a remote unauthenticated attacker can cause excessive resource consumption. This behavior can exhaust...

thrift: thrift: Denial of Service via improper length parameter handling in Lua bindings

A flaw was found in the Apache Thrift Lua bindings. A remote attacker could exploit this vulnerability by sending requests containing inconsistent length parameters, triggering excessive resource allocation without proper limits. This issue can exhaust available system memory or processing...

thrift: Apache Thrift: Denial of Service via uncontrolled resource allocation in PHP bindings

A flaw was found in the Apache Thrift PHP bindings. Due to a lack of limits or throttling on resource allocation, a remote attacker can send crafted requests that consume excessive system resources. This issue can lead to a Denial of Service DoS for the affected service...

apache/thrift: thrift: Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

A flaw was found in Apache Thrift's PHP bindings. A remote, unauthenticated attacker can exploit this vulnerability by sending requests that trigger unbounded resource allocation without proper limits or throttling. This failure to control consumption can exhaust system resources, resulting in a...

thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...

thrift: thrift: Denial of Service via memory leak in C++ bindings

A flaw was found in Apache Thrift's C++ bindings. A remote attacker can cause a Denial of Service DoS by exploiting a memory leak where allocated system memory is not properly released after use. Over time, repeated requests can exhaust available memory and lead to service instability...