CVE-2019-0205

—

CVSS 3.1

7.5 high

EPSS

9%p95

Published

Oct 29, 2019 (Oct 29, 2019)

Modified

Jun 17, 2026

Description

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.

Vendors: apache redhat oracle
Products: thrift, jboss enterprise application platform, communications cloud native core network slice selection function
Weakness: CWE-835
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (9.2%)

In the news0 stories

No ingested article mentions this CVE yet.