Not rated
CVE-2016-5397 The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an…
Description
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Thrift | Versions not published |
References
- 103025 www.securityfocus.com
- RHSA-2018:2669 access.redhat.com
- issues.apache.org issues.apache.org
- [user] 20170113 [NOTICE]: Apache Thrift Security Vulnerability CVE-2016-5397 mail-archives.apache.org
- RHSA-2019:3140 access.redhat.com
- [cassandra-commits] 20200604 [jira] [Created] (CASSANDRA-15856) Security vulnerabilities with dependency jars of Cassandra 3.11.6 lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Thrift
The 91 CVEs of Apache Thrift →
CVE-2026-120135
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings
8.2
High
CVE-2026-66054
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification)…
6.9
Medium
CVE-2026-61374
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
7.1
High
CVE-2026-63772
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings
8.7
High