thrift vulnerabilities (Bitnami)
88 vulnerabilities.
thriftBitnamiApache Thrift: c_glib TZlibTransport reports a full read after a premature stream end6.3 MediumthriftBitnamiApache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)8.7 HighthriftBitnamiApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pee…8.7 HighthriftBitnamiApache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)9.2 CriticalthriftBitnamiApache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements8.7 HighthriftBitnamiApache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id8.7 HighthriftBitnamiApache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path8.7 HighthriftBitnamiApache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length8.7 HighthriftBitnamiApache Thrift: Python `TJSONProtocol` has a string length limit that is off by default8.2 HighthriftBitnamiApache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)8.2 HighthriftBitnamiApache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name8.7 HighthriftBitnamiApache Thrift: Python TSSLSocket Hostname Matcher Import5.9 MediumthriftBitnamiApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass8.7 HighthriftBitnamiApache Thrift: Rust binary protocol non-strict path missing string size limit8.7 HighthriftBitnamiApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path6.9 MediumthriftBitnamiApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()9.3 CriticalthriftBitnamiApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()6.9 MediumthriftBitnamiApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()8.7 HighthriftBitnamiApache Thrift: Node.js quadratic-time DoS in server receive transports8.7 HighthriftBitnamiApache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb7.5 HighthriftBitnamiApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit8.7 HighthriftBitnamiApache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass8.2 HighthriftBitnamiApache Thrift: c_glib TLS Client Missing Hostname Verification9.1 CriticalthriftBitnamiApache Thrift: Unbounded Read Leading to Denial of Service6.9 MediumthriftBitnamiApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit8.7 HighthriftBitnamiApache Thrift: Unbounded Zlib Decompression in Python THeaderTransport7.5 HighthriftBitnamiApache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern5.3 MediumthriftBitnamiApache Thrift: Node.js web_server.js multi-vulnerability7.3 HighthriftBitnamiApache Thrift: TSSLTransportFactory.java hostname verification7.3 HighthriftBitnamiApache Thrift: Node.js skip() recursion8.7 HighthriftBitnamiApache Thrift: C++ JSON OOB read6.5 MediumthriftBitnamiApache Thrift: c_glib dispatch stack overflow5.3 MediumthriftBitnamiApache Thrift: Swift Compact Protocol integer overflow7.3 HighthriftBitnamiApache Thrift: Swift Range crash in skip()8.2 HighthriftBitnamiApache Thrift has an issue with Java TSSLTransportFactory hostname verification7.4 HighthriftBitnamiApache Thrift: Go TFramedTransport uint32 overflow7.5 HighthriftBitnamiApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.7.5 HighthriftBitnamiUncontrolled Resource Consumption in Apache Thrift7.5 High