搜索结果
关于「thrift」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-66053 | Apache Thrift：Python TSSLSocket 主机名匹配器导入 (CVE-2026-66053) | 2026-07-27 | ||
| AVD-2026-58662 | Apache Thrift：C++ THeaderTransport::readString() 信息标头长度边界绕过 (CVE-2026-58662) | 2026-07-27 | ||
| AVD-2026-58389 | Apache Thrift：Rust 二进制协议非严格路径缺少字符串大小限制 (CVE-2026-58389) | 2026-07-27 | ||
| AVD-2026-58023 | Apache Thrift：传输剩余字节路径中的 c_glib 堆越界读取 (CVE-2026-58023) | 2026-07-27 | ||
| AVD-2026-55971 | Apache Thrift：THeaderTransport::untransform() 中的 C++ ZLIB 堆缓冲区溢出（写入）(CVE-2026-55971) | 2026-07-27 | ||
| AVD-2026-55970 | Apache Thrift：THeaderTransport::readHeaderFormat() 中的 C++ 堆越界读取 (CVE-2026-55970) | 2026-07-27 | ||
| AVD-2026-55969 | Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift：TProtocol::checkReadBytesAvailable() 中的整数溢出 (CVE-2026-55969) | 2026-07-27 | ||
| AVD-2026-55968 | Apache Thrift：服务器接收传输中的 Node.js 二次时间 DoS (CVE-2026-55968) | 2026-07-27 | ||
| AVD-2026-49158 | Apache Thrift：Ruby THeaderTransport ZLIB 减压炸弹 (CVE-2026-49158) | 2026-07-27 | ||
| AVD-2026-48586 | Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift：TZlibTransport 解压大小限制 (CVE-2026-48586) | 2026-07-27 | ||
| AVD-2026-41608 | Apache Thrift：Python THeaderTransport 中的无限 Zlib 解压缩 (CVE-2026-41608) | 2026-07-27 | ||
| AVD-2026-43871 | Apache Thrift、Apache Thrift、Apache Thrift、Apache Thrift：TCompactProtocol varint 字节计数限制 (CVE-2026-43871) | 2026-07-27 | ||
| AVD-2026-45112 | Apache Thrift：无限读取导致拒绝服务 (CVE-2026-45112) | 2026-07-27 | ||
| AVD-2026-48144 | Apache Thrift：c_glib TLS 客户端缺少主机名验证 (CVE-2026-48144) | 2026-07-27 | ||
| AVD-2026-48145 | Apache Thrift：C++ TSSLSocket matchName() RFC 6125 通配符绕过 (CVE-2026-48145) | 2026-07-27 | ||
| AVD-2026-43870 | Apache Thrift < 0.23.0 多类型安全漏洞(CVE-2026-43870) | 2026-05-05 | ||
| AVD-2026-43868 | Apache Thrift TCompactProtocol 内存耗尽漏洞(CVE-2026-43868) | 2026-05-05 | ||
| AVD-2026-43869 | Apache Thrift 证书主机名验证绕过漏洞(CVE-2026-43869) | 2026-05-05 | ||
| AVD-2026-41636 | Apache Thrift Node.js skip()递归漏洞(CVE-2026-41636) | 2026-04-28 | ||
| AVD-2026-41606 | Apache Thrift < 0.23.0 未受控递归漏洞(CVE-2026-41606) | 2026-04-28 | ||
| AVD-2026-41607 | Apache Thrift 0.23.0前 C++ JSON 越界读取漏洞(CVE-2026-41607) | 2026-04-28 | ||
| AVD-2026-41605 | Thrift < 0.23.0 整数溢出漏洞(CVE-2026-41605) | 2026-04-28 | ||
| AVD-2026-41604 | Apache Thrift TCompactProtocol 越界读取漏洞(CVE-2026-41604) | 2026-04-28 | ||
| AVD-2026-41603 | Apache Thrift 证书主机名验证缺失(CVE-2026-41603) | 2026-04-28 | ||
| AVD-2026-41602 | Apache Thrift Go TFramedTransport整数溢出漏洞(CVE-2026-41602) | 2026-04-28 | ||
| AVD-2025-48431 | Apache Thrift c_glib 内存管理错误(CVE-2025-48431) | 2026-04-28 | ||
| AVD-2021-24028 | facebook thrift 对无效指针或索引的释放 | 2021-04-14 | ||
| AVD-2020-13949 | Apache Thrift up to 0.13.0 Short Message 拒绝服务漏洞 | 2021-02-13 | ||
| AVD-2019-11939 | Golang Facebook Thrift Server Messages Memory Exhaustion 拒绝服务漏洞 | 2020-03-18 | ||
| AVD-2019-11938 | 恶意客户端可能会发送短消息，从而导致大量内存分配，并可能导致拒绝服务 | 2020-03-11 |