Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-3254

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.2%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
Products affected by CVE-2015-3254
  • Apache » Thrift » Version: 0.2.0
    cpe:2.3:a:apache:thrift:0.2.0
  • Apache » Thrift » Version: 0.3.0
    cpe:2.3:a:apache:thrift:0.3.0
  • Apache » Thrift » Version: 0.4.0
    cpe:2.3:a:apache:thrift:0.4.0
  • Apache » Thrift » Version: 0.5.0
    cpe:2.3:a:apache:thrift:0.5.0
  • Apache » Thrift » Version: 0.6.0
    cpe:2.3:a:apache:thrift:0.6.0
  • Apache » Thrift » Version: 0.6.1
    cpe:2.3:a:apache:thrift:0.6.1
  • Apache » Thrift » Version: 0.7.0
    cpe:2.3:a:apache:thrift:0.7.0
  • Apache » Thrift » Version: 0.8.0
    cpe:2.3:a:apache:thrift:0.8.0
  • Apache » Thrift » Version: 0.9.0
    cpe:2.3:a:apache:thrift:0.9.0
  • Apache » Thrift » Version: 0.9.1
    cpe:2.3:a:apache:thrift:0.9.1
  • Apache » Thrift » Version: 0.9.2
    cpe:2.3:a:apache:thrift:0.9.2


Contact Us

Shodan ® - All rights reserved