apache thrift Schwachstellen (CVE)

Für apache thrift veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

25 Ergebnisse
5.9Mittel
CVE-2026-66053

Apache Thrift: Python TSSLSocket Hostname Matcher Import

Apache Software Foundation Apache Thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603

8.7Hoch
CVE-2026-55968

Apache Thrift: Node.js quadratic-time DoS in server receive transports

Apache Software Foundation Apache Thrift

Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

1.0%EPSS
7.5Hoch
CVE-2026-49158

Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

Apache Software Foundation Apache Thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

1.0%EPSS
6.9Mittel
CVE-2026-45112

Apache Thrift: Unbounded Read Leading to Denial of Service

Apache Software Foundation Apache Thrift

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

1.0%EPSS
5.3Mittel
CVE-2026-43868

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Apache Software Foundation Apache Thrift; Red Hat Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1; Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat AI Inference Server

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

7.3Hoch
CVE-2026-43870

Apache Thrift: Node.js web_server.js multi-vulnerability

Apache Software Foundation Apache Thrift

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resource Consumption vulnerability in Apache T…

7.3Hoch
CVE-2026-43869

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Software Foundation Apache Thrift; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1; Red Hat Multicluster Global Hub 1.3.4

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

8.7Hoch
CVE-2026-41636

Apache Thrift: Node.js skip() recursion

Apache Software Foundation Apache Thrift

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

6.5Mittel
CVE-2026-41607

Apache Thrift: C++ JSON OOB read

Apache Software Foundation Apache Thrift; Red Hat Multicluster Global Hub 1.3.4; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

5.3Mittel
CVE-2026-41606

Apache Thrift: c_glib dispatch stack overflow

Apache Software Foundation Apache Thrift; Red Hat Multicluster Global Hub 1.3.4; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

1.1%EPSS
7.3Hoch
CVE-2026-41605

Apache Thrift: Swift Compact Protocol integer overflow

Apache Software Foundation Apache Thrift; Red Hat Multicluster Global Hub 1.3.4; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

8.2Hoch
CVE-2026-41604

Apache Thrift: Swift Range crash in skip()

Apache Software Foundation Apache Thrift; Red Hat Multicluster Global Hub 1.3.4; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

7.5Hoch
CVE-2026-41602

Apache Thrift: Go TFramedTransport uint32 overflow

Apache Software Foundation Apache Thrift; Red Hat Multicluster Global Hub 1.3.4; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

1.2%EPSS
7.5Hoch
CVE-2025-48431

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Apache Software Foundation Apache Thrift; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted reques…

1.0%EPSS