Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/thrift@0.13.0-6
purl pkg:deb/debian/thrift@0.13.0-6
Next non-vulnerable version 0.17.0-2
Latest non-vulnerable version 0.17.0-2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-gkzd-prsr-gqc8
Aliases:
CVE-2020-13949
GHSA-g2fg-mr77-6vrm
Uncontrolled Resource Consumption in Apache Thrift In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
0.17.0-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-6r6v-dxqb-3fe1 Out-of-bounds read in Apache Thrift In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. CVE-2019-0210
GHSA-jq7p-26h5-w78r
VCID-y1ca-jr94-kfb4 Multiple vulnerabilities have been found in Apache Thrift, the worst of which could result in a Denial of Service condition. CVE-2019-0205
GHSA-rj7p-rfgp-852x

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:32:21.035475+00:00 Debian Importer Affected by VCID-gkzd-prsr-gqc8 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-15T21:44:47.785223+00:00 Debian Oval Importer Fixing VCID-y1ca-jr94-kfb4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:14:15.612342+00:00 Debian Oval Importer Fixing VCID-6r6v-dxqb-3fe1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-13T07:51:55.772379+00:00 Debian Importer Affected by VCID-gkzd-prsr-gqc8 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T21:23:28.560707+00:00 Debian Oval Importer Fixing VCID-y1ca-jr94-kfb4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:54:02.533083+00:00 Debian Oval Importer Fixing VCID-6r6v-dxqb-3fe1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T21:02:05.060208+00:00 Debian Oval Importer Fixing VCID-y1ca-jr94-kfb4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:33:30.635678+00:00 Debian Oval Importer Fixing VCID-6r6v-dxqb-3fe1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:14:00.858296+00:00 Debian Importer Affected by VCID-gkzd-prsr-gqc8 https://security-tracker.debian.org/tracker/data/json 38.1.0