{"id":"CVE-2018-1320","aliases":["CLSA-2026-1772669612","CLSA-2026-1772756024","DEBIAN-CVE-2018-1320","DLA-1662-1","EUVD-2019-0196","GHSA-wjxj-f8rg-99wx","UBUNTU-CVE-2018-1320"],"status":"published","title":"Improper Input Validation in Apache Thrift","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.08188,"percentile":0.94908,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-295"],"published":"2019-01-07T17:29:00Z","modified":"2026-11-02T19:45:19Z","fixes":[{"ecosystem":"Maven","package":"org.apache.thrift:libthrift","fixed_in":["0.9.3-1","0.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.apache.thrift:libthrift","fixed_in":["0.9.1-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libthrift-java","fixed_in":["0.9.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libthrift-java","fixed_in":["0.9.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libthrift-java","fixed_in":["0.9.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libthrift-java","fixed_in":["0.9.1-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libthrift-java","fixed_in":["0.9.1-2.1~build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libthrift-java","fixed_in":["0.9.1-2.1~build0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.thrift:libthrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.0"},{"fixed":"0.9.3-1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.thrift:libthrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"0.12.0"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.thrift:libthrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.9.1"},{"fixed":"0.9.1-tuxcare.2"}]}],"versions":["0.9.1","0.9.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.thrift:libfb303","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.9.3"},{"fixed":"0.9.3-tuxcare.2"}]}],"versions":["0.9.3","0.9.3.tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.thrift:libthrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.9.3"},{"fixed":"0.9.3-tuxcare.2"}]}],"versions":["0.9.3","0.9.3.tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libthrift-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libthrift-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libthrift-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libthrift-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-2+deb8u1"}]}],"versions":["0.9.1-2"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.thrift:libthrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.0"},{"fixed":"0.9.3-1"}]}],"versions":["0.6.1","0.7.0","0.8.0","0.9.0","0.9.1","0.9.2","0.9.3"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.thrift:libthrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"0.12.0"}]}],"versions":["0.10.0","0.11.0"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libthrift-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-2.1~build0.16.04.1"}]}],"versions":["0.9.1-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libthrift-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-2.1~build0.18.04.1"}]}],"versions":["0.9.1-2"]}],"products":[{"vendor":"apache","product":"thrift"},{"vendor":"apache software foundation","product":"apache thrift"},{"vendor":"debian","product":"debian_linux"},{"vendor":"f5","product":"traffix_signaling_delivery_controller"},{"vendor":"oracle","product":"global_lifecycle_management_opatch"},{"vendor":"oracle","product":"nosql_database"}],"references":[{"url":"https://lists.apache.org/thread.html/da5234b5e78f1c99190407f791dfe1bf6c58de8d30d15974a9669be3%40%3Cuser.thrift.apache.org%3E","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/106551","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/187684ac8b94d55256253f5220cb55e8bd568afdf9a8a86e9bbb66c9%40%3Cdevnull.infra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K36361684","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/dbe3a39b48900318ad44494e8721f786901ba4520cd412c7698f534f%40%3Cdev.storm.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/dfee89880c84874058c6a584d8128468f8d3c2ac25068ded91073adc%40%3Cuser.storm.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/e825ff2f4e129c0ecdb6a19030b53c1ccdf810a8980667628d0c6a80%40%3Cannounce.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2019/07/24/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2413","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/3d3b6849fcf4cd1e87703b3dde0d57aabeb9ba0193dc0cf3c97f545d%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/6b07f6f618155c777191b4fad8ade0f0cf4ed4c12a1a746ce903d816%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/07c3cd5a2953a4b253eee4437b1397b1603d0f886437e19b657d2c54%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/8be5b16c02567fff61b1284e5df433a4e38617bc7de4804402bf62be%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2278846f7ab06ec07a0aa31457235e0ded9191b216cba55f3f315f16%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r261972a3b14cf6f1dcd94b1b265e9ef644a38ccdf0d0238fa0c4d459%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r09c3dcdccf4b74ad13bda79b354e6b793255ccfe245cca1b8cee23f5%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r3d71a6dbb063aa61ba81278fe622b20bfe7501bb3821c27695641ac3%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r1015eaadef8314daa9348aa423086a732cfeb998ceb5d42605c9b0b5%40%3Ccommits.cassandra.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1320","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/07c3cd5a2953a4b253eee4437b1397b1603d0f886437e19b657d2c54@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/187684ac8b94d55256253f5220cb55e8bd568afdf9a8a86e9bbb66c9@%3Cdevnull.infra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/3d3b6849fcf4cd1e87703b3dde0d57aabeb9ba0193dc0cf3c97f545d@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/6b07f6f618155c777191b4fad8ade0f0cf4ed4c12a1a746ce903d816@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/8be5b16c02567fff61b1284e5df433a4e38617bc7de4804402bf62be@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/da5234b5e78f1c99190407f791dfe1bf6c58de8d30d15974a9669be3@%3Cuser.thrift.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/dbe3a39b48900318ad44494e8721f786901ba4520cd412c7698f534f@%3Cdev.storm.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/dfee89880c84874058c6a584d8128468f8d3c2ac25068ded91073adc@%3Cuser.storm.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/e825ff2f4e129c0ecdb6a19030b53c1ccdf810a8980667628d0c6a80@%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r09c3dcdccf4b74ad13bda79b354e6b793255ccfe245cca1b8cee23f5@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2278846f7ab06ec07a0aa31457235e0ded9191b216cba55f3f315f16@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r261972a3b14cf6f1dcd94b1b265e9ef644a38ccdf0d0238fa0c4d459@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3d71a6dbb063aa61ba81278fe622b20bfe7501bb3821c27695641ac3@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1015eaadef8314daa9348aa423086a732cfeb998ceb5d42605c9b0b5@%3Ccommits.cassandra.apache.org%3E","tags":["web"]},{"url":"https://github.com/apache/thrift/releases/tag/0.9.3.1","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/THRIFT-4506","tags":["web","report"]},{"url":"https://web.archive.org/web/20200227094237/http://www.securityfocus.com/bid/106551","tags":["web"]},{"url":"https://github.com/apache/thrift/commit/7489ed6ac8bad64e72fa83ec9d53e1eeddca6c23","tags":["web"]},{"url":"https://github.com/apache/thrift/commit/d973409661f820d80d72c0034d06a12348c8705e","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-wjxj-f8rg-99wx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1320","tags":["advisory"]},{"url":"https://github.com/apache/thrift","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2018-1320","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1320","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-1320","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-07T18:00:00Z","modified":"2024-08-05T03:59:37.833Z","updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2019-0196","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-07T18:00:00Z","modified":"2024-08-05T03:59:37Z","updated_at":"2026-11-03T02:40:16.309405Z"}],"ghsa":[{"id":"GHSA-wjxj-f8rg-99wx","title":"Improper Input Validation in Apache Thrift","description":"Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to 0.12.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-17T13:56:40Z","modified":"2024-03-04T20:36:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-295"],"updated_at":"2026-11-02T14:37:39.730152Z"}],"nvd":[{"id":"CVE-2018-1320","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-07T17:29:00.36Z","modified":"2026-06-17T01:51:00.723Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:04:52.056758Z"}],"osv":[{"id":"CVE-2018-1320","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-07T17:29:00.36Z","modified":"2026-10-24T10:30:41.335959879Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-1320","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-07T17:29:00.36Z","modified":"2026-10-23T18:03:54.772338436Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"GHSA-wjxj-f8rg-99wx","title":"Improper Input Validation in Apache Thrift","description":"Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to 0.12.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-17T13:56:40Z","modified":"2026-09-10T03:47:58.972749951Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-295"],"updated_at":"2026-11-02T15:46:58.767335Z"},{"id":"UBUNTU-CVE-2018-1320","description":"Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","status":"published","published":"2019-01-07T17:29:00Z","modified":"2025-07-16T07:37:56.768114Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"CLSA-2026-1772669612","title":"TuxCare security update for org.apache.thrift:libthrift (1 CVE)","description":"TuxCare rebuilt org.apache.thrift:libthrift to address 1 CVE. Fixed in 0.9.1-tuxcare.2.","status":"published","published":"2026-08-04T14:52:10Z","modified":"2026-11-02T19:45:19.598820767Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1772756024","title":"TuxCare security update for org.apache.thrift (4 CVEs)","description":"TuxCare rebuilt 2 org.apache.thrift packages to address 4 CVEs. Fixed in 0.9.3-tuxcare.2.","status":"published","published":"2026-08-04T14:52:10Z","modified":"2026-10-15T09:46:16.694320961Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"DLA-1662-1","title":"libthrift-java - security update","status":"published","published":"2019-02-06T00:00:00Z","modified":"2026-03-09T01:21:08.468374Z","updated_at":"2026-11-02T15:46:09.777694Z"}]}}