PT-2019-4350 · Apache+2 · Apache Thrift+2

Publicado 2019-10-28 · Atualizado 2026-05-18 · CVE-2019-0205

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apache Thrift versions up to and including 0.12.0

Description The issue is related to a server or client potentially running into an endless loop when fed with specific input data, which could allow a remote attacker to cause a denial of service. The problem had been partially fixed in version 0.11.0, but it still affects certain language bindings depending on the installed version.

Recommendations For Apache Thrift versions up to and including 0.12.0, consider updating to a version where this issue is fully resolved, as the current version may cause a server or client to run into an endless loop when fed with specific input data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2020-2981

AZL-41158

BDU:2020-00070

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-RN56220

CVE-2019-0205

GHSA-RJ7P-RFGP-852X

OESA-2021-1017

RHSA-2020:0804

RHSA-2020:0805

RHSA-2020:0806

RHSA-2020:0962

RHSA-2020:2511

RHSA-2020:2512

RHSA-2020:2513

Produtos afetados

Alt Linux

Apache Thrift

Astra Linux

Referências · 275

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RN56220.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LE11246.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KU61465.json · Nota
• https://lists.apache.org/thread.html/r4633082b834eebccd0d322697651d931ab10ca9c51ee7ef18e1f60f4@%3Cdev.thrift.apache.org%3E · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-42583 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-fghv-69vj-qj49 · Nota
• https://osv.dev/vulnerability/ghsa-xq3w-v528-46rv · Nota
• https://osv.dev/vulnerability/AZL-41158 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-0341 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-42585 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1320 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-42779 · Nota
• https://access.redhat.com/errata/RHSA-2020:0805 · Aviso do Fabricante
• https://lists.apache.org/thread.html/003ac686189e6ce7b99267784d04bf60059a8c323eeda5a79a0309b8%40%3Ccommits.cassandra.apache.org%3E · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-58057 · Nota de Segurança