GitHub Advisoryadvisory · Go

GHSA-jq7p-26h5-w78r Out-of-bounds read in Apache Thrift

HIGH Published 2021-05-18 Modified 2022-10-31 Official page ↗
Aliases
CVE-2019-0210
Ecosystem
Go
Packages
github.com/apache/thrift
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125
Reviewed
2021-05-17

Affected packages

• Go github.com/apache/thrift: >= 0.9.3, < 0.13.0 → fixed in 0.13.0

Description

In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

Related

Alias · CVE (1)

  • CVE-2019-0210 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid… vulnerability

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References