apache thrift CVE-2019-0210 in Apache and Oracle Products
Published on October 29, 2019

product logo product logo
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2019-0210

stack.watch emails you whenever new vulnerabilities are published in Apache Thrift or Oracle Communications Cloud Native Core Network Slice Selection Function. Just hit a watch button to start following.

Apache Thrift
 
Oracle Communications Cloud Native Core Network Slice Selection Function
 

Affected Versions

Apache Thrift Version 0.9.3 to 0.12.0 is affected by CVE-2019-0210

Exploit Probability

EPSS
0.37%
Percentile
58.07%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.