CVE-2018-1320" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-wjxj-f8rg-99wx/hovercard" href="https://github.com/advisories/GHSA-wjxj-f8rg-99wx">CVE-2018-1320 | HIGH | 0.10.0 | 0.12.0 | thrift: SASL negotiation | | | | | | | isComplete validation bypass in the | | | | | | | org.apache.thrift.transport.TSaslTransport | | | | | | | class -->avd.aquasec.com/nvd/cve-2018-1320 | + +------------------+ + +---------------+--------------------------------------------+ | | CVE-2019-0205 | | | 0.13.0 | thrift: Endless loop when | | | | | | | feed with specific input data | | | | | | | -->avd.aquasec.com/nvd/cve-2019-0205 | + +------------------+ + + +--------------------------------------------+ | | CVE-2019-0210 | | | | thrift: Out-of-bounds read | | | | | | | related to TJSONProtocol | | | | | | | or TSimpleJSONProtocol | | | | | | | -->avd.aquasec.com/nvd/cve-2019-0210 | + +------------------+ + +---------------+--------------------------------------------+ | | CVE-2020-13949 | | | 0.14.0 | libthrift: potential DoS when | | | | | | | processing untrusted payloads | | | | | | | -->avd.aquasec.com/nvd/cve-2020-13949 | +-----------------------------+------------------+----------+-------------------+---------------+--------------------------------------------+```

Commits

Commits on May 3, 2021

Fixes thrift vulnerabilities