thrift-qt vulnerabilities (Red Hat)
47 vulnerabilities.
-
thrift-qtRed Hat Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize 6.9 Medium -
thrift-qtRed Hat Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) 8.2 High -
thrift-qtRed Hat Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages 8.7 High -
thrift-qtRed Hat Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize 6.9 Medium -
thrift-qtRed Hat Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length 8.7 High -
thrift-qtRed Hat Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) 8.7 High -
thrift-qtRed Hat Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route 8.7 High -
thrift-qtRed Hat Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D) 8.7 High -
thrift-qtRed Hat Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception 8.7 High -
thrift-qtRed Hat Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound 8.2 High -
thrift-qtRed Hat Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame 8.2 High -
thrift-qtRed Hat Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back 6.3 Medium -
thrift-qtRed Hat Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) 8.7 High -
thrift-qtRed Hat Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` 6.3 Medium -
thrift-qtRed Hat Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service 8.2 High -
thrift-qtRed Hat Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service 8.7 High -
thrift-qtRed Hat Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript 6.3 Medium -
thrift-qtRed Hat Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely 8.7 High -
thrift-qtRed Hat Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match 6.9 Medium -
thrift-qtRed Hat Apache Thrift: Perl TLS client disables certificate verification by default 6.9 Medium -
thrift-qtRed Hat Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process 8.2 High -
thrift-qtRed Hat Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
thrift-qtRed Hat Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) 8.2 High -
thrift-qtRed Hat Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) 8.2 High -
thrift-qtRed Hat Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pee… 8.7 High -
thrift-qtRed Hat Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id 8.7 High -
thrift-qtRed Hat Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path 8.7 High -
thrift-qtRed Hat Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length 8.7 High -
thrift-qtRed Hat Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name 8.7 High -
thrift-qtRed Hat Apache Thrift: Python TSSLSocket Hostname Matcher Import 5.9 Medium -
thrift-qtRed Hat Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path 6.9 Medium -
thrift-qtRed Hat Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform() 9.3 Critical -
thrift-qtRed Hat Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() 6.9 Medium -
thrift-qtRed Hat Apache Thrift: Node.js quadratic-time DoS in server receive transports 8.7 High -
thrift-qtRed Hat Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb 7.5 High -
thrift-qtRed Hat Apache Thrift: Unbounded Read Leading to Denial of Service 6.9 Medium -
thrift-qtRed Hat Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit 8.7 High -
thrift-qtRed Hat Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport 7.5 High -
thrift-qtRed Hat Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
thrift-qtRed Hat Mistune vulnerable to catastrophic backtracking 7.5 High -
thrift-qtRed Hat Path Traversal in Buildah 8.8 High -
thrift-qtRed Hat TaffyDB can allow access to any data items in the DB 7.5 High -
thrift-qtRed Hat The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker... 5.0 Medium -
thrift-qtRed Hat A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin.... 6.5 Medium -
thrift-qtRed Hat The OpenShift image import whitelist failed to enforce restrictions correctly when running... 4.3 Medium -
thrift-qtRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 5.3 Medium -
thrift-qtRed Hat ceph - security update 7.5 High