Description
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache | Apache Thrift | all versions up to and including 0.12.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | thrift | 0.13.0-2 | — |
| Debian 13 | thrift | 0.13.0-2 | — |
| Debian 12 | thrift | 0.13.0-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 2.9.0-2.redhat_00009.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-apache-commons-beanutils | 1.9.4-1.redhat_00002.1.el6eap | RHSA-2020:0806, RHSA-2020:0805, RHSA-2020:0804 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.3.5-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-bouncycastle +3 | 1.60.0-2.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-codehaus-jackson +4 | 1.9.13-10.redhat_00007.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-cryptacular | 1.2.4-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.6.1-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-glassfish-el +1 | 3.0.1-4.b08_redhat_00003.1.el6eap | RHSA-2020:0806, RHSA-2020:0805, RHSA-2020:0804 |
| Red Hat JBoss EAP 7 | eap7-glassfish-jsf | 2.3.5-7.SP3_redhat_00005.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.0.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.15-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-infinispan +8 | 9.3.8-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.4.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jackson-core +9 | 2.10.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jackson-databind | 2.9.10.2-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jaegertracing-jaeger-client-java +2 | 0.34.1-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jakarta-el | 3.0.3-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jandex | 2.1.2-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jasypt | 1.9.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.28-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-genericjms | 2.0.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsf-api_2.3_spec | 3.0.0-3.SP02_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-modules | 1.10.0-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.17-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting-jmx | 3.0.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +23 | 1.3.1-8.Final_redhat_00009.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration-eap7.3-server +6 | 1.7.1-5.Final_redhat_00006.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-vfs | 3.2.15-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-weld-3.1-api +2 | 3.1.0-6.SP2_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-config +1 | 1.4.0-1.redhat_00003.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-health | 2.2.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-metrics +1 | 2.3.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-opentracing +1 | 1.3.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-rest-client +1 | 1.4.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-opensaml +13 | 3.3.1-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-picketbox +1 | 5.0.3-7.Final_redhat_00006.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-picketlink-bindings +1 | 2.5.5-23.SP12_redhat_00012.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-resteasy +19 | 3.11.2-3.Final_redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-slf4j-jboss-logmanager | 1.0.4-1.GA_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-config | 1.6.2-3.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-health | 2.2.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-metrics | 2.4.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-opentracing | 1.3.4-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-snakeyaml | 1.24.0-2.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-stax2-api | 4.2.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-sun-istack-commons +2 | 3.0.10-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-thrift | 0.13.0-1.redhat_00002.1.el6eap | RHSA-2020:0962, RHSA-2020:0806, RHSA-2020:0805 |
| Red Hat JBoss EAP 7 | eap7-txw2 +8 | 2.3.3-4.b02_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.0.28-4.SP1_redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-weld-ejb +6 | 3.1.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly +2 | 7.2.7-4.GA_redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron +1 | 1.10.6-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-http-client +4 | 1.0.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk8 +1 | 7.2.7-4.GA_redhat_00004.1.el7eap | RHSA-2020:2512, RHSA-2020:0805 |
| Red Hat JBoss EAP 7 | eap7-wildfly-naming-client | 1.0.12-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl +2 | 1.0.9-2.SP03_redhat_00001.1.el6eap | RHSA-2020:0962, RHSA-2020:0806, RHSA-2020:0805 |
| Red Hat JBoss EAP 7 | eap7-wildfly-transaction-client | 1.1.9-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-woodstox-core | 6.0.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wss4j +6 | 2.2.5-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-xml-security | 2.1.4-1.redhat_00001.1.el6eap | RHSA-2020:0806, RHSA-2020:0805, RHSA-2020:0804 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | influxdb | 2.7.3-4 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | druid | 35.0.1-r1 | — |
| Wolfi rolling | trino +58 | 440-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
cgarrot/echo-dot-3-doebrite-research ★ 0 · Oct 22, 2026
Software-only security research on the Amazon Echo Dot 3rd Gen (doebrite): pre-auth DoS (CVE-2019-0205), SSRF, root SOCKS5, WhisperJoin BLE reversed, and a proof that no custom firmware can be instal…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.thrift:libthrift | < 0.13.0 | 0.13.0 | GHSA-rj7p-rfgp-852x |
Advisories 8
- RHSA-2020:0805 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:0806 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:0804 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:2513 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2512 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2511 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:0962 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- WID-SEC-2023-0723 IBM Integration Bus: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 22, 2023
References
- [thrift-dev] 20191106 [jira] [Updated] (THRIFT-4997) Nexus Scan Reporting Security issue CVE-2019-0205 for Thrift: mailing-list
- [thrift-dev] 20191106 [jira] [Comment Edited] (THRIFT-4997) Nexus Scan Reporting Security issue CVE-2019-0205 for Thrift: mailing-list
- [thrift-dev] 20191106 [jira] [Created] (THRIFT-4997) Nexus Scan Reporting Security issue CVE-2019-0205 for Thrift: mailing-list
- [thrift-dev] 20191106 [jira] [Resolved] (THRIFT-4997) Nexus Scan Reporting Security issue CVE-2019-0205 for Thrift: mailing-list
- [thrift-dev] 20191106 [jira] [Assigned] (THRIFT-4997) Nexus Scan Reporting Security issue CVE-2019-0205 for Thrift: mailing-list
- [thrift-user] 20191107 CVE-2019-0205 mailing-list
- [thrift-user] 20191108 Re: CVE-2019-0205 mailing-list
- [cassandra-commits] 20191113 [jira] [Created] (CASSANDRA-15415) CVE-2019-0205 (Apache Thrift all versions up to and including 0.12.0 vulnerable) of severity 7.5 mailing-list
- [cassandra-commits] 20191113 [jira] [Created] (CASSANDRA-15420) CVE-2019-0205(Apache Thrift all versions up to and including 0.12.0) on version Cassendra 3.11.4 mailing-list
- [hive-dev] 20200116 [jira] [Created] (HIVE-22738) CVE-2019-0205 mailing-list
- [hive-issues] 20200116 [jira] [Updated] (HIVE-22738) CVE-2019-0205 mailing-list
- [thrift-dev] 20200124 [jira] [Commented] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-dev] 20200124 [jira] [Created] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-dev] 20200125 [jira] [Comment Edited] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-dev] 20200125 [jira] [Commented] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-dev] 20200127 [jira] [Commented] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-dev] 20200208 [jira] [Comment Edited] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-dev] 20200208 [jira] [Commented] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [thrift-commits] 20200208 [thrift] 01/01: THRIFT-5075: Backport changes for CVE-2019-0205 to 0.9.3.1 branch mailing-list
- RHSA-2020:0806 vendor-advisory
- RHSA-2020:0811 vendor-advisory
- RHSA-2020:0804 vendor-advisory
- RHSA-2020:0805 vendor-advisory
- [cassandra-commits] 20200604 [jira] [Created] (CASSANDRA-15856) Security vulnerabilities with dependency jars of Cassandra 3.11.6 mailing-list
- [thrift-notifications] 20200813 [GitHub] [thrift] kevinsookocheff-wf commented on pull request #1993: THRIFT-5075: Backport changes for CVE-2019-0205 to 0.9.3.1 branch mailing-list
- [pulsar-commits] 20210120 [GitHub] [pulsar] fmiguelez opened a new issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210 and CVE-2019-0205 mailing-list
- [pulsar-commits] 20210121 [GitHub] [pulsar] hpvd commented on issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210 and CVE-2019-0205 mailing-list
- [pulsar-commits] 20210122 [GitHub] [pulsar] hpvd commented on issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210 and CVE-2019-0205 mailing-list
- [thrift-dev] 20210204 [jira] [Updated] (THRIFT-4997) Nexus Scan Reporting Security issue CVE-2019-0205 for Thrift: mailing-list
- [thrift-dev] 20210204 [jira] [Updated] (THRIFT-5075) Backport fixes for CVE-2019-0205 to (Java) 0.9.3-1 version mailing-list
- [cassandra-commits] 20210415 [jira] [Commented] (CASSANDRA-15420) CVE-2019-0205(Apache Thrift all versions up to and including 0.12.0) on version Cassendra 3.11.4 mailing-list
- [cassandra-commits] 20210415 [jira] [Updated] (CASSANDRA-15420) CVE-2019-0205(Apache Thrift all versions up to and including 0.12.0) on version Cassendra 3.11.4 mailing-list
- [pulsar-commits] 20210607 [GitHub] [pulsar] lhotari commented on issue #9248: Upgrade Thrift dependency in broker to solve CVE-2019-0210, CVE-2019-0205 and CVE-2020-13949 mailing-list
- GLSA-202107-32 vendor-advisory
- https://www.oracle.com//security-alerts/cpujul2021.html
- http://mail-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/%3CVI1PR0101MB2142E0EA19F582429C3AEBCBB1920%40VI1PR0101MB2142.eurprd01.prod.exchangelabs.com%3E
- [hive-issues] 20210915 [jira] [Resolved] (HIVE-22738) CVE-2019-0205 mailing-list
- [cassandra-commits] 20210924 [jira] [Assigned] (CASSANDRA-15420) CVE-2019-0205(Apache Thrift all versions up to and including 0.12.0) on version Cassendra 3.11.4 mailing-list
- [cassandra-commits] 20210924 [jira] [Updated] (CASSANDRA-15420) CVE-2019-0205(Apache Thrift all versions up to and including 0.12.0) on version Cassendra 3.11.4 mailing-list
- [cassandra-user] 20211004 Vulnerability in libthrift library (CVE-2019-0205) mailing-list
- [cassandra-user] 20211004 Re: Vulnerability in libthrift library (CVE-2019-0205) mailing-list
- [cassandra-user] 20211005 Re: Vulnerability in libthrift library (CVE-2019-0205) mailing-list