thrift vulnerabilities (openSUSE)
54 vulnerabilities.
-
thriftopenSUSE Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard 8.2 High -
thriftopenSUSE Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) 8.2 High -
thriftopenSUSE Apache Thrift: Perl servers end `serve()` when serving one connection fails 8.2 High -
thriftopenSUSE Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception 8.7 High -
thriftopenSUSE Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) 8.7 High -
thriftopenSUSE Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound 8.2 High -
thriftopenSUSE Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound 8.2 High -
thriftopenSUSE Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic 8.2 High -
thriftopenSUSE Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame 8.2 High -
thriftopenSUSE Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) 8.2 High -
thriftopenSUSE Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service 8.7 High -
thriftopenSUSE Apache Thrift: Perl TLS client disables certificate verification by default 6.9 Medium -
thriftopenSUSE Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process 8.2 High -
thriftopenSUSE Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
thriftopenSUSE Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) 8.2 High -
thriftopenSUSE Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) 8.2 High -
thriftopenSUSE Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound 8.2 High -
thriftopenSUSE Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception 8.7 High -
thriftopenSUSE Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound 8.2 High -
thriftopenSUSE Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound 8.2 High -
thriftopenSUSE Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) 8.2 High -
thriftopenSUSE Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error 8.2 High -
thriftopenSUSE Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end 6.3 Medium -
thriftopenSUSE Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) 8.7 High -
thriftopenSUSE Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pee… 8.7 High -
thriftopenSUSE Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) 9.2 Critical -
thriftopenSUSE Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements 8.7 High -
thriftopenSUSE Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id 8.7 High -
thriftopenSUSE Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path 8.7 High -
thriftopenSUSE Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length 8.7 High -
thriftopenSUSE Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default 8.2 High -
thriftopenSUSE Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) 8.2 High -
thriftopenSUSE Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name 8.7 High -
thriftopenSUSE Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass 8.7 High -
thriftopenSUSE Apache Thrift: Rust binary protocol non-strict path missing string size limit 8.7 High -
thriftopenSUSE Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path 6.9 Medium -
thriftopenSUSE Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform() 9.3 Critical -
thriftopenSUSE Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() 6.9 Medium -
thriftopenSUSE Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() 8.7 High -
thriftopenSUSE Apache Thrift: Node.js quadratic-time DoS in server receive transports 8.7 High -
thriftopenSUSE Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb 7.5 High -
thriftopenSUSE Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit 8.7 High -
thriftopenSUSE Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass 8.2 High -
thriftopenSUSE Apache Thrift: c_glib TLS Client Missing Hostname Verification 9.1 Critical -
thriftopenSUSE Apache Thrift: Unbounded Read Leading to Denial of Service 6.9 Medium -
thriftopenSUSE Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit 8.7 High -
thriftopenSUSE Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport 7.5 High -
thriftopenSUSE Apache Thrift: Node.js skip() recursion 8.7 High -
thriftopenSUSE Apache Thrift: C++ JSON OOB read 6.5 Medium -
thriftopenSUSE Apache Thrift: c_glib dispatch stack overflow 5.3 Medium - Show olderLoading…