CVE-2018-1320: Improper Input Validation in Apache Thrift
Summary
CVE-2018-1320: Improper Input Validation in Apache Thrift. Affects org.apache.thrift:libthrift across 2 version ranges.
>= 0.5.0, < 0.9.3-1
>= 0.10.0, < 0.12.0
Fixed in 0.9.3-1 or 0.12.0, depending on the release line you run. How to fix ↓
Also tracked for
- libthrift-java · Debian:12
The same CVE-2018-1320 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Thrift is an open-source software framework used for scalable cross-language services development. It allows efficient and reliable communication between different programming languages. The vulnerability affects the Apache Thrift Java client library versions 0.5.0 to 0.9.3-1 and 0.10.0 to 0.12.0. This vulnerability allows bypassing SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. In production settings, an assert used to determine if the SASL handshake had successfully completed could be disabled, leading to incomplete validation.
Vulnerability Detail
The vulnerability arises from improper input validation in the Apache Thrift Java client library. By disabling the assert used to validate the completion of the SASL handshake, an attacker can bypass the SASL negotiation isComplete validation. This can potentially lead to unauthorized access or other security issues. The vulnerability has a CVSS score of 7.5, indicating a high severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 0.5.0, < 0.9.3-10.9.3-1 -
>= 0.10.0, < 0.12.00.12.0
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The Apache Thrift Java client library versions 0.5.0 to 0.9.3-1 and 0.10.0 to 0.12.0 are vulnerable to improper input validation. This can lead to unauthorized access or other security issues. It is crucial to update to the recommended versions to mitigate the vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.apache.thrift:libthrift →
FAQ
Apache Thrift is an open-source software framework for scalable cross-language services development.
The vulnerability affects Apache Thrift Java client library versions 0.5.0 to 0.9.3-1 and 0.10.0 to 0.12.0.
The vulnerability allows bypassing SASL negotiation isComplete validation, potentially leading to unauthorized access or other security issues.
The vulnerability has a CVSS score of 7.5, indicating a high severity level.
To fix this vulnerability, upgrade the Apache Thrift Java client library to the recommended versions.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.thrift:libthrift.
