CVE-2019-0210

thrift: Out-of-bounds read related to TJSONProtocol or TSimpleJSONProtocol

Published Oct 28, 2019 CVSS 3.1 · 7.5 High EPSS 6.5% KEV · Not listed
Description
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-1123 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
Github GHSA Github GHSA GHSA-jq7p-26h5-w78r Out-of-bounds read in Apache Thrift
History

No history.