GO-2021-0101

Panic due to out-of-bounds read in github.com/apache/thrift

En bref

Publiée: 2021-07-28 18:08 UTC
Mise à jour: 2026-06-16 13:29 UTC
CVE: CVE-2019-0210
Alias: GHSA-jq7p-26h5-w78r

Description

Due to an improper bounds check, parsing maliciously crafted messages can cause panics. If this package is used to parse untrusted input, this may be used as a vector for a denial of service attack.

Paquets affectés

Paquet	Versions
Go · github.com/apache/thrift	introduced 0.0.0-20151001171628-53dd39833a08, fixed 0.13.0

Références

https://github.com/apache/thrift/commit/264a3f318ed3e9e51573f67f963c8509786bcec2 FIX

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database