Most recent entries from all

bdu:2021-02888

BIT-thrift-2020-13949

Affected: Bitnami: thrift

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un…

certfr-2021-avi-951

Withdrawn: CLEANSTART-2026-MG63413 — Security fixes in spark-sc213-jdk17-py312 3.5.8-r0

Withdrawn by the publisher.

Affected: CleanStart: spark-sc213-jdk17-py312

Package spark-sc213-jdk17-py312 version 3.5.8-r0 fixes 74 vulnerabilities: CVE-2026-54515, ghsa-5jmj-h7xm-6q6v, ghsa-337m-mw94-2v6g, CVE-2026-45205, ghsa-2r2c-cx56-8933...

cnvd-2021-11836

EUVD-2026-42114

fkie_cve-2020-13949

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

GHSA-g2fg-mr77-6vrm — Uncontrolled Resource Consumption in Apache Thrift

Affected: Maven: org.apache.thrift:libthrift

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

gsd-2020-13949

openSUSE-SU-2024:11459-1 — libthrift-0_14_1-0.14.1-1.6 on GA media

libthrift-0_14_1-0.14.1-1.6 on GA media

RHSA-2021:2543 — Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.20.4 security update

libthrift: potential DoS when processing untrusted payloads golang: math/big: panic during recursive division of very large numbers nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions golang: crypto/elliptic: incorrect operations on the P-224 curve nodejs-lodash: command injection via template golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header

UBUNTU-CVE-2020-13949

Affected: Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.