CVE-2026-41605

Опубликовано: 28 апр. 2026

Источник: debian

EPSS Низкий

Описание

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
thrift	fixed	0.23.0-1	experimental	package
thrift	fixed	0.23.0-3		package

Примечания

https://www.openwall.com/lists/oss-security/2026/04/28/4
swift bindings not built in Debian package

EPSS

Процентиль: 57%

0.0093

Низкий

Связанные уязвимости

CVE-2026-41605

CVSS3: 7.3

ubuntu

3 месяца назад

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-41605

CVSS3: 7.7

redhat

3 месяца назад

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-41605

CVSS3: 7.3

nvd

3 месяца назад

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-41605

msrc

3 месяца назад

Apache Thrift: Swift Compact Protocol integer overflow

GHSA-qcp3-xfwx-5hr4

CVSS3: 7.3

github

3 месяца назад

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

EPSS

Процентиль: 57%

0.0093

Низкий