thrift vulnerabilities (Azure Linux)
80 vulnerabilities.
thriftAzure LinuxApache Thrift: c_glib TZlibTransport reports a full read after a premature stream end6.3 MediumthriftAzure LinuxApache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)8.7 HighthriftAzure LinuxApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pee…8.7 HighthriftAzure LinuxApache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)9.2 CriticalthriftAzure LinuxApache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements8.7 HighthriftAzure LinuxApache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id8.7 HighthriftAzure LinuxApache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path8.7 HighthriftAzure LinuxApache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length8.7 HighthriftAzure LinuxApache Thrift: Python `TJSONProtocol` has a string length limit that is off by default8.2 HighthriftAzure LinuxApache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)8.2 HighthriftAzure LinuxApache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name8.7 HighthriftAzure LinuxApache Thrift: Python TSSLSocket Hostname Matcher Import5.9 MediumthriftAzure LinuxApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass8.7 HighthriftAzure LinuxApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path6.9 MediumthriftAzure LinuxApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()9.3 CriticalthriftAzure LinuxApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()6.9 MediumthriftAzure LinuxApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()8.7 HighthriftAzure LinuxApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit8.7 HighthriftAzure LinuxApache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass8.2 HighthriftAzure LinuxApache Thrift: c_glib TLS Client Missing Hostname Verification9.1 CriticalthriftAzure LinuxApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit8.7 HighthriftAzure LinuxApache Thrift: Unbounded Zlib Decompression in Python THeaderTransport7.5 HighthriftAzure LinuxApache Thrift: Node.js skip() recursion8.7 HighthriftAzure LinuxApache Thrift: C++ JSON OOB read6.5 MediumthriftAzure LinuxApache Thrift: c_glib dispatch stack overflow5.3 MediumthriftAzure LinuxApache Thrift: Swift Compact Protocol integer overflow7.3 HighthriftAzure LinuxApache Thrift: Swift Range crash in skip()8.2 HighthriftAzure LinuxApache Thrift: Go TFramedTransport uint32 overflow7.5 HighthriftAzure LinuxApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.7.5 HighthriftAzure LinuxA use-after-free vulnerability involving upgradeToRocket requests can cause the application to...7.5 High