p PatchFirst

CVE-2019-0210

CVE-2019-0210

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

CVSS 7.5 · High · EPSS 6.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • apache thrift

    Versions
    • 0.9.3 to 0.12.0: Affected

    No fix published

  • thrift Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.13.0-2

    Update to 0.13.0-2

  • thrift Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.13.0-2

    Update to 0.13.0-2

  • thrift Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.13.0-2

    Update to 0.13.0-2

Original sources

Check your server →