Skip to content
OpenAdvisories

Package · Ubuntu

libthrift-java

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2026-61374

    Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

    Apache Software Foundation Apache Thrift thrift libthrift-java Debian Ubuntu
  • High 8.2
    CVE-2026-66055

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

    Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu
  • High 8.7
    CVE-2026-82458

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available

    Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.…

    Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu
  • High 8.7
    CVE-2026-61373

    Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

    Apache Software Foundation Apache Thrift thrift libthrift-java Debian Ubuntu
  • High 8.2
    CVE-2026-94651

    Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

    improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes th…

    Apache Software Foundation Apache Thrift thrift libthrift-java Debian Ubuntu
  • High 8.2
    CVE-2026-94639

    Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)

    improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.…

    Apache Software Foundation Apache Thrift thrift libthrift-java Debian Ubuntu
  • High 8.7
    CVE-2026-48586

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the iss…

    Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu
  • High 8.7
    CVE-2026-43871

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

    Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

    Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu Packagist Maven PyPI Go
  • High 7.5
    CVE-2018-1320

    Improper Input Validation in Apache Thrift

    Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be di…

    Apache Software Foundation Apache Thrift libthrift-java org.apache.thrift:libthrift Debian Ubuntu Maven