Not rated
CVE-2019-0210 In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when…
Description
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Thrift | Versions not published |
References
- RHSA-2020:0806 access.redhat.com
- RHSA-2020:0811 access.redhat.com
- RHSA-2020:0804 access.redhat.com
- RHSA-2020:0805 access.redhat.com
- [pulsar-commits] 20210120 [GitHub] [pulsar] fmiguelez opened a new issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210 and CVE-2019-0205 lists.apache.org
- [pulsar-commits] 20210121 [GitHub] [pulsar] hpvd commented on issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210 and CVE-2019-0205 lists.apache.org
- [pulsar-commits] 20210122 [GitHub] [pulsar] hpvd commented on issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210 and CVE-2019-0205 lists.apache.org
- [pulsar-commits] 20210607 [GitHub] [pulsar] lhotari commented on issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210, CVE-2019-0205 and CVE-2020-13949 lists.apache.org
- GLSA-202107-32 security.gentoo.org
- www.oracle.com www.oracle.com
- mail-archives.apache.org mail-archives.apache.org
Timeline
- Published
- Last modified