https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 06:39:38 +0000 https://vulnerability.circl.lu/vuln/bit-thrift-2026-83663 <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings.</p> <p>Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings.</p> <p>Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/bit-thrift-2026-83663 https://vulnerability.circl.lu/vuln/fkie_cve-2026-83663 <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings.</p> <p>Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings.</p> <p>Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-83663 https://vulnerability.circl.lu/vuln/ghsa-rvwr-5g7j-6pm8 <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings.</p> <p>Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings.</p> <p>Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ghsa-rvwr-5g7j-6pm8 https://vulnerability.circl.lu/vuln/rhsa-2026:79368 <p>github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data</p> <p>github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data</p> https://vulnerability.circl.lu/vuln/rhsa-2026:79368 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-83663 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so nothing bounds the depth. The Go stack limit is reached as a `fatal error`, which `recover()` cannot catch, so the whole process dies. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-83663