RHSA-2026:49837
Vulnerability from csaf_redhat - Published: 2026-08-03 23:43 - Updated: 2026-09-08 22:44Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
thrift:
* perl-thrift-0.24.0-0.1.hum1 (noarch)
* python3-thrift-0.24.0-0.1.hum1 (aarch64, x86_64)
* thrift-0.24.0-0.1.hum1 (aarch64, x86_64)
* thrift-devel-0.24.0-0.1.hum1 (aarch64, x86_64)
* thrift-glib-0.24.0-0.1.hum1 (aarch64, x86_64)
* thrift-qt-0.24.0-0.1.hum1 (aarch64, x86_64)
* thrift-0.24.0-0.1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Apache Thrift Python bindings. This vulnerability involves the improper handling of highly compressed data, leading to a data amplification issue. An attacker could exploit this by providing specially crafted compressed input, which may cause the application to consume excessive resources. This could potentially result in a denial of service (DoS) for affected systems.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Apache Thrift, affecting its Python, Go, PHP, and Java components. This vulnerability, known as an 'Infinite Loop', could allow a remote attacker to disrupt service availability. By exploiting this flaw, an attacker can trigger a continuous loop, leading to a denial of service (DoS) for applications using the affected bindings.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or throttle resource allocation, leading to potential system instability or unresponsiveness.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift Ruby bindings. This vulnerability, categorized as improper handling of highly compressed data, allows a remote attacker to cause a denial of service (DoS) through a data amplification attack. By sending specially crafted highly compressed data, an attacker can exhaust system resources, making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift Node.js bindings. This vulnerability, stemming from inefficient algorithmic complexity and the allocation of resources without proper limits or throttling, allows a remote attacker to cause a Denial of Service (DoS). By exploiting this, an attacker can consume excessive resources, making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift C++ bindings. This buffer over-read vulnerability allows a remote attacker to read beyond the intended memory boundaries. This could lead to the disclosure of sensitive information or cause the application to become unavailable.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and cause a denial of service.
8.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift c_glib bindings. This out-of-bounds read vulnerability allows an attacker to potentially access sensitive information or cause a denial of service. The vulnerability occurs when the software attempts to read data beyond the allocated memory buffer.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Apache Thrift Python bindings. This vulnerability, stemming from improper validation of certificates with host mismatch, could allow a remote attacker to intercept and access sensitive information. The issue occurs when the Python client fails to adequately verify the server's certificate against its hostname, potentially enabling a man-in-the-middle (MITM) attack and leading to information disclosure.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:thrift-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:thrift-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
64 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nthrift:\n * perl-thrift-0.24.0-0.1.hum1 (noarch)\n * python3-thrift-0.24.0-0.1.hum1 (aarch64, x86_64)\n * thrift-0.24.0-0.1.hum1 (aarch64, x86_64)\n * thrift-devel-0.24.0-0.1.hum1 (aarch64, x86_64)\n * thrift-glib-0.24.0-0.1.hum1 (aarch64, x86_64)\n * thrift-qt-0.24.0-0.1.hum1 (aarch64, x86_64)\n * thrift-0.24.0-0.1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49837",
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41608",
"url": "https://access.redhat.com/security/cve/CVE-2026-41608"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66053",
"url": "https://access.redhat.com/security/cve/CVE-2026-66053"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58023",
"url": "https://access.redhat.com/security/cve/CVE-2026-58023"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55970",
"url": "https://access.redhat.com/security/cve/CVE-2026-55970"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55968",
"url": "https://access.redhat.com/security/cve/CVE-2026-55968"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45112",
"url": "https://access.redhat.com/security/cve/CVE-2026-45112"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-49158",
"url": "https://access.redhat.com/security/cve/CVE-2026-49158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43871",
"url": "https://access.redhat.com/security/cve/CVE-2026-43871"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55971",
"url": "https://access.redhat.com/security/cve/CVE-2026-55971"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49837.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-09-08T22:44:46+00:00",
"generator": {
"date": "2026-09-08T22:44:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.17"
}
},
"id": "RHSA-2026:49837",
"initial_release_date": "2026-08-03T23:43:03+00:00",
"revision_history": [
{
"date": "2026-08-03T23:43:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-08T14:32:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-08T22:44:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "thrift-main@noarch",
"product": {
"name": "thrift-main@noarch",
"product_id": "thrift-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-thrift@0.24.0-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "thrift-main@aarch64",
"product": {
"name": "thrift-main@aarch64",
"product_id": "thrift-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-thrift@0.24.0-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "thrift-main@x86_64",
"product": {
"name": "thrift-main@x86_64",
"product_id": "thrift-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-thrift@0.24.0-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thrift-main@src",
"product": {
"name": "thrift-main@src",
"product_id": "thrift-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thrift@0.24.0-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thrift-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:thrift-main@aarch64"
},
"product_reference": "thrift-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thrift-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:thrift-main@noarch"
},
"product_reference": "thrift-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thrift-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:thrift-main@src"
},
"product_reference": "thrift-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thrift-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:thrift-main@x86_64"
},
"product_reference": "thrift-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41608",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-27T12:01:38.876845+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift Python bindings. This vulnerability involves the improper handling of highly compressed data, leading to a data amplification issue. An attacker could exploit this by providing specially crafted compressed input, which may cause the application to consume excessive resources. This could potentially result in a denial of service (DoS) for affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift Python bindings: Denial of Service via data amplification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Apache Thrift Python bindings, which could lead to a Denial of Service due to data amplification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41608"
},
{
"category": "external",
"summary": "RHBZ#2507442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41608"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41608",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41608"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/32",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/32"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/vwsbcwqdpwdtp8qkjo11ol6rodbfm21f",
"url": "https://lists.apache.org/thread/vwsbcwqdpwdtp8qkjo11ol6rodbfm21f"
}
],
"release_date": "2026-07-27T10:53:43.865000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: Apache Thrift Python bindings: Denial of Service via data amplification"
},
{
"cve": "CVE-2026-43871",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-27T12:01:34.458030+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507441"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift, affecting its Python, Go, PHP, and Java components. This vulnerability, known as an \u0027Infinite Loop\u0027, could allow a remote attacker to disrupt service availability. By exploiting this flaw, an attacker can trigger a continuous loop, leading to a denial of service (DoS) for applications using the affected bindings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift: Denial of Service via infinite loop",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43871"
},
{
"category": "external",
"summary": "RHBZ#2507441",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507441"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43871"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/33",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/33"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby",
"url": "https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby"
}
],
"release_date": "2026-07-27T10:56:15.279000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: Apache Thrift: Denial of Service via infinite loop"
},
{
"cve": "CVE-2026-45112",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-27T12:01:28.483023+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or throttle resource allocation, leading to potential system instability or unresponsiveness.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. It stems from uncontrolled resource allocation in Apache Thrift Java bindings, which can lead to a denial of service. This impacts Red Hat products such as Red Hat OpenShift AI, Red Hat build of Apache Camel, Red Hat Ceph Storage, Red Hat Connectivity Link, and Cryostat, where services utilizing these vulnerable bindings could experience resource exhaustion and service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45112"
},
{
"category": "external",
"summary": "RHBZ#2507439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45112",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45112"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45112",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45112"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/34",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/34"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/hl9kmf1z2o3lxvspoj3g9ykl8lj9mdxc",
"url": "https://lists.apache.org/thread/hl9kmf1z2o3lxvspoj3g9ykl8lj9mdxc"
}
],
"release_date": "2026-07-27T10:57:34.326000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-49158",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-27T12:01:15.066188+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507435"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift Ruby bindings. This vulnerability, categorized as improper handling of highly compressed data, allows a remote attacker to cause a denial of service (DoS) through a data amplification attack. By sending specially crafted highly compressed data, an attacker can exhaust system resources, making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift Ruby bindings: Denial of Service via improper handling of highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Apache Thrift Ruby bindings could allow a remote, unauthenticated attacker to trigger a denial of service. By sending specially crafted compressed data, an attacker can cause excessive resource consumption, leading to service unavailability in affected Red Hat products that utilize these bindings, such as OpenShift Container Platform components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-49158"
},
{
"category": "external",
"summary": "RHBZ#2507435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507435"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-49158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49158"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/38",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/38"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/fmjl8l415tj9zwlob8v2dr5hq1d0hts7",
"url": "https://lists.apache.org/thread/fmjl8l415tj9zwlob8v2dr5hq1d0hts7"
}
],
"release_date": "2026-07-27T11:05:07.157000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: Apache Thrift Ruby bindings: Denial of Service via improper handling of highly compressed data"
},
{
"cve": "CVE-2026-55968",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-27T12:01:21.414479+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift Node.js bindings. This vulnerability, stemming from inefficient algorithmic complexity and the allocation of resources without proper limits or throttling, allows a remote attacker to cause a Denial of Service (DoS). By exploiting this, an attacker can consume excessive resources, making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift Node.js bindings: Denial of Service due to inefficient algorithmic complexity and resource allocation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Apache Thrift Node.js bindings, which could allow a remote attacker to exhaust system resources due to inefficient algorithmic complexity. This flaw primarily impacts Red Hat OpenShift Container Platform components that utilize the vulnerable Thrift Node.js bindings, potentially leading to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55968"
},
{
"category": "external",
"summary": "RHBZ#2507437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55968"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55968",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55968"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/39",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/39"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/gxhhfyr6flr5vzr4qnxm13p6fc41qstp",
"url": "https://lists.apache.org/thread/gxhhfyr6flr5vzr4qnxm13p6fc41qstp"
}
],
"release_date": "2026-07-27T11:06:17.910000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: Apache Thrift Node.js bindings: Denial of Service due to inefficient algorithmic complexity and resource allocation"
},
{
"cve": "CVE-2026-55970",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-27T12:01:25.459434+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507438"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift C++ bindings. This buffer over-read vulnerability allows a remote attacker to read beyond the intended memory boundaries. This could lead to the disclosure of sensitive information or cause the application to become unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in Apache Thrift C++ bindings could lead to information disclosure due to a buffer over-read. Red Hat products utilizing affected versions of Apache Thrift, such as Red Hat Enterprise Linux AI, OpenShift Container Platform, and Red Hat OpenShift AI, may be susceptible if processing untrusted data with Thrift client applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55970"
},
{
"category": "external",
"summary": "RHBZ#2507438",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507438"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55970"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55970",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55970"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/8pbnw4dyxxc9opp6qq725jhrzg25v8q7",
"url": "https://lists.apache.org/thread/8pbnw4dyxxc9opp6qq725jhrzg25v8q7"
}
],
"release_date": "2026-07-27T11:09:41.544000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability"
},
{
"cve": "CVE-2026-55971",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-07-27T12:01:58.342437+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507448"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects the C++ implementation of Apache Thrift, specifically the ZLIB-enabled THeaderTransport (THeaderTransport::untransform()), which is reachable when a Thrift client or server negotiates the Header transport protocol with ZLIB compression enabled over a network connection. Red Hat ships the affected C++ package (thrift) in RHEL AI and in the Fedora/EPEL community distributions, and it is also consumed by AIPCC\u0027s PyArrow build pipeline (tracked separately as AIPCC-28667); upgrade to Apache Thrift 0.24.0 or later to remediate.\n\nConfirmed usage in RHEL AI 3.4\u0027s GPU bootc images and in the AIPCC PyArrow build pipeline is limited to PyArrow\u0027s Parquet metadata support, which serializes structs via Thrift\u0027s TCompactProtocol directly to an in-memory buffer and does not invoke THeaderTransport. As a result, this usage does not expose the vulnerable code path to network input; it would require local access to a maliciously crafted Parquet file instead.\n\nOther Red Hat components that reference Apache Thrift via the Go implementation (github.com/apache/thrift) or the Java Maven artifact (org.apache.thrift:libthrift) depend on independently implemented, separately maintained codebases; the Java bindings do not include the vulnerable ZLIB THeaderTransport code path (and CWE-122 heap corruption does not apply to JVM memory-managed arrays) and are therefore not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55971"
},
{
"category": "external",
"summary": "RHBZ#2507448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507448"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55971"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/xjs36m6kjxpmrmzwck636msg3nvoqnmx",
"url": "https://lists.apache.org/thread/xjs36m6kjxpmrmzwck636msg3nvoqnmx"
}
],
"release_date": "2026-07-27T11:11:23.201000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
},
{
"category": "workaround",
"details": "No mitigation is available other than upgrading to Apache Thrift 0.24.0 or later, which contains the fix. AIPCC\u0027s PyArrow build pipeline is tracked separately for remediation under AIPCC-28667.",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow"
},
{
"cve": "CVE-2026-58023",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-27T12:01:31.554513+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507440"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift c_glib bindings. This out-of-bounds read vulnerability allows an attacker to potentially access sensitive information or cause a denial of service. The vulnerability occurs when the software attempts to read data beyond the allocated memory buffer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity out-of-bounds read vulnerability in Apache Thrift c_glib bindings could lead to information disclosure and denial of service. Red Hat products such as OpenShift Container Platform, Red Hat OpenShift Update Service, and Confidential Compute Attestation are affected where they utilize vulnerable versions of Apache Thrift. Red Hat Enterprise Linux AI is not affected as the vulnerable code is not present.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58023"
},
{
"category": "external",
"summary": "RHBZ#2507440",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507440"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58023"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/z2myopbovxngfvchdz8hddots9p5ffbt",
"url": "https://lists.apache.org/thread/z2myopbovxngfvchdz8hddots9p5ffbt"
}
],
"release_date": "2026-07-27T11:12:40.875000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read"
},
{
"cve": "CVE-2026-66053",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-27T12:01:48.872068+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507445"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift Python bindings. This vulnerability, stemming from improper validation of certificates with host mismatch, could allow a remote attacker to intercept and access sensitive information. The issue occurs when the Python client fails to adequately verify the server\u0027s certificate against its hostname, potentially enabling a man-in-the-middle (MITM) attack and leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in Apache Thrift Python bindings could lead to information disclosure due to improper certificate validation, allowing a remote attacker with high attack complexity to intercept sensitive data without requiring user interaction or privileges. While Red Hat Enterprise Linux AI is not affected, OpenShift Container Platform, Red Hat OpenShift Update Service, and Confidential Compute Attestation are impacted where these bindings are used in network communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66053"
},
{
"category": "external",
"summary": "RHBZ#2507445",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507445"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66053",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66053"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66053",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66053"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/w4k5dnv1x58knwlhpo9x0or5xh220y65",
"url": "https://lists.apache.org/thread/w4k5dnv1x58knwlhpo9x0or5xh220y65"
}
],
"release_date": "2026-07-27T11:18:49.830000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T23:43:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49837"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:thrift-main@aarch64",
"Red Hat Hardened Images:thrift-main@noarch",
"Red Hat Hardened Images:thrift-main@src",
"Red Hat Hardened Images:thrift-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…