Apache Thrift

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apache_thrift:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApache Thrift (2c262e0c-5115-5c06-8384-457e1928a80a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0210 vulnerable 2026-06-08 05:12:19.296523 Details available
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
Published: 2019-10-28T22:22:38.000Z
Updated: 2024-08-04T17:44:14.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0205 vulnerable 2026-06-08 05:12:19.289999 Details available
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
Published: 2019-10-28T22:32:27.000Z
Updated: 2024-08-04T17:44:15.368Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.