Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2020-2981
ALT-PU-2020-2981: package `thrift` update to version 0.13.0-alt1_9
CVE-2018-1320
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.
CVE-2018-1320
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.
CVE-2018-1320
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.
CVE-2018-1320
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can by ...
GHSA-wjxj-f8rg-99wx
Improper Input Validation in Apache Thrift
BDU:2019-04255
Уязвимость класса org.apache.thrift.transport.TSaslTransport языка описания интерфейсов Apache Thrift, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2019-03809
Уязвимость класса org.apache.thrift.transport.TSaslTransport языка описания интерфейсов Apache Thrift, позволяющая нарушителю обойти SASL-согласования
CVE-2019-0210
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
CVE-2019-0210
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
CVE-2019-0210
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
CVE-2019-0210
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJS ...
CVE-2019-0205
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
CVE-2019-0205
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
CVE-2019-0205
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
CVE-2019-0205
In Apache Thrift all versions up to and including 0.12.0 a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0 depending on the installed version it affects only certain language bindings.
CVE-2019-0205
In Apache Thrift all versions up to and including 0.12.0, a server or ...
GHSA-jq7p-26h5-w78r
Out-of-bounds read in Apache Thrift
BDU:2021-02870
Уязвимость библиотеки Apache Thrift прикладного программного обеспечения Аврора Центр, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-rj7p-rfgp-852x
Loop with Unreachable Exit Condition in Apache Thrift
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-2981 ALT-PU-2020-2981: package `thrift` update to version 0.13.0-alt1_9 | CVSS3: 7.5 | около 6 лет назад | |
 | CVE-2018-1320 Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete. | CVSS3: 7.5 | 8% Низкий | почти 8 лет назад |
 | CVE-2018-1320 Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete. | CVSS3: 6.5 | 8% Низкий | больше 8 лет назад |
 | CVE-2018-1320 Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete. | CVSS3: 7.5 | 8% Низкий | почти 8 лет назад |
| CVE-2018-1320 Apache Thrift Java client library versions 0.5.0 through 0.11.0 can by ... | CVSS3: 7.5 | 8% Низкий | почти 8 лет назад |
| GHSA-wjxj-f8rg-99wx Improper Input Validation in Apache Thrift | CVSS3: 7.5 | 8% Низкий | почти 8 лет назад |
 | BDU:2019-04255 Уязвимость класса org.apache.thrift.transport.TSaslTransport языка описания интерфейсов Apache Thrift, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.5 | 8% Низкий | почти 8 лет назад |
| BDU:2019-03809 Уязвимость класса org.apache.thrift.transport.TSaslTransport языка описания интерфейсов Apache Thrift, позволяющая нарушителю обойти SASL-согласования | CVSS3: 7.5 | 8% Низкий | почти 8 лет назад |
| CVE-2019-0210 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| CVE-2019-0210 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| CVE-2019-0210 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| CVE-2019-0210 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJS ... | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| CVE-2019-0205 In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings. | CVSS3: 7.5 | 9% Низкий | около 7 лет назад |
| CVE-2019-0205 In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings. | CVSS3: 5.9 | 9% Низкий | около 7 лет назад |
| CVE-2019-0205 In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings. | CVSS3: 7.5 | 9% Низкий | около 7 лет назад |
 | CVE-2019-0205 In Apache Thrift all versions up to and including 0.12.0 a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0 depending on the installed version it affects only certain language bindings. | CVSS3: 7.5 | 9% Низкий | около 2 лет назад |
| CVE-2019-0205 In Apache Thrift all versions up to and including 0.12.0, a server or ... | CVSS3: 7.5 | 9% Низкий | около 7 лет назад |
| GHSA-jq7p-26h5-w78r Out-of-bounds read in Apache Thrift | CVSS3: 7.5 | 7% Низкий | больше 5 лет назад |
| BDU:2021-02870 Уязвимость библиотеки Apache Thrift прикладного программного обеспечения Аврора Центр, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 7% Низкий | больше 5 лет назад |
| GHSA-rj7p-rfgp-852x Loop with Unreachable Exit Condition in Apache Thrift | CVSS3: 7.5 | 9% Низкий | больше 4 лет назад |
Уязвимостей на страницу