Endless Loop Vulnerability in Apache Thrift by The Apache Software Foundation
CVE-2019-0205
7.5HIGH
What is CVE-2019-0205?
In Apache Thrift versions up to and including 0.12.0, both clients and servers can enter an infinite loop when processed with specially crafted input data. This issue can lead to potential denial-of-service conditions depending on the specific language bindings utilized. Although a partial fix was applied in version 0.11.0, users of the affected versions remain susceptible to exploitation by providing malicious inputs.
Affected Version(s)
Apache Thrift all versions up to and including 0.12.0