PT-2018-4929 · Apache+1 · Apache Thrift+1

Felix Groebert · Publicado 2017-11-23 · Atualizado 2022-05-13 · CVE-2016-5397

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Thrift versions 0.9.3 and older

Description The issue arises from the use of an external formatting tool during code generation, potentially exposing the system to command injection.

Recommendations For Apache Thrift versions 0.9.3 and older, update to Apache Thrift 0.10.0 to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

ALT-PU-2017-2692

CVE-2016-5397

GHSA-R4M4-PMVW-M6J5

Produtos afetados

Alt Linux

Apache Thrift

Referências · 21

• https://github.com/apache/thrift/commit/2007783e874d524a46b818598a45078448ecc53e · Nota
• http://mail-archives.apache.org/mod_mbox/thrift-user/201701.mbox/raw/%3CCANyrgvc3W%3DMJ9S-hMZecPNzxkyfgNmuSgVfW2hdDSz5ke%2BOPhQ%40mail.gmail.com%3E · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-5397 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:3140 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-r4m4-pmvw-m6j5 · Aviso do Fabricante
• https://issues.apache.org/jira/browse/THRIFT-3893 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3254 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2016-5397 · Nota
• http://securityfocus.com/bid/103025 · Nota
• https://ubuntu.com/security/CVE-2016-5397 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-5397 · Aviso do Fabricante
• https://web.archive.org/web/20210124141102/http://securityfocus.com/bid/103025 · Nota
• https://access.redhat.com/errata/RHSA-2018:2669 · Aviso do Fabricante
• https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5397 · Aviso do Fabricante