GitHub Advisoryadvisory · Maven

GHSA-rj7p-rfgp-852x Loop with Unreachable Exit Condition in Apache Thrift

HIGH Published 2022-05-24 Modified 2022-06-27 Official page ↗
Aliases
CVE-2019-0205
Ecosystem
Maven
Packages
org.apache.thrift:libthrift
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2022-06-27

Affected packages

• Maven org.apache.thrift:libthrift: < 0.13.0 → fixed in 0.13.0

Description

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.

Related

Alias · CVE (1)

  • CVE-2019-0205 In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input… vulnerability

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References