thrift vulnerabilities (Ubuntu)
82 vulnerabilities.
thriftUbuntuApache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id8.7 HighthriftUbuntuApache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path8.7 HighthriftUbuntuApache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length8.7 HighthriftUbuntuApache Thrift: Python `TJSONProtocol` has a string length limit that is off by default8.2 HighthriftUbuntuApache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name8.7 HighthriftUbuntuApache Thrift: Python TSSLSocket Hostname Matcher Import5.9 MediumthriftUbuntuApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass8.7 HighthriftUbuntuApache Thrift: Rust binary protocol non-strict path missing string size limit8.7 HighthriftUbuntuApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path6.9 MediumthriftUbuntuApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()9.3 CriticalthriftUbuntuApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()6.9 MediumthriftUbuntuApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()8.7 HighthriftUbuntuApache Thrift: Node.js quadratic-time DoS in server receive transports8.7 HighthriftUbuntuApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit8.7 HighthriftUbuntuApache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass8.2 HighthriftUbuntuApache Thrift: c_glib TLS Client Missing Hostname Verification9.1 CriticalthriftUbuntuApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit8.7 HighthriftUbuntuApache Thrift: Unbounded Zlib Decompression in Python THeaderTransport7.5 HighthriftUbuntuApache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern5.3 MediumthriftUbuntuApache Thrift: Node.js web_server.js multi-vulnerability7.3 HighthriftUbuntuApache Thrift: TSSLTransportFactory.java hostname verification7.3 HighthriftUbuntuApache Thrift: Node.js skip() recursion8.7 HighthriftUbuntuApache Thrift: C++ JSON OOB read6.5 MediumthriftUbuntuApache Thrift: c_glib dispatch stack overflow5.3 MediumthriftUbuntuApache Thrift: Swift Compact Protocol integer overflow7.3 HighthriftUbuntuApache Thrift: Swift Range crash in skip()8.2 HighthriftUbuntuApache Thrift has an issue with Java TSSLTransportFactory hostname verification7.4 HighthriftUbuntuApache Thrift: Go TFramedTransport uint32 overflow7.5 HighthriftUbuntuApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.7.5 HighthriftUbuntuUncontrolled Resource Consumption in Apache Thrift7.5 HighthriftUbuntuGolang Facebook Thrift servers vulnerable to denial of service7.5 High