CVE-2016-5397
1 advisory.
Go/github.com/apache/thrift CVE-2016-5397: high 8.8, EPSS 6.87%
Apache Thrift Go Library Command Injection
Action: Upgrade github.com/apache/thrift to 0.10.0 or later.
go get github.com/apache/thrift@v0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-r4m4-pmvw-m6j5
- https://nvd.nist.gov/vuln/detail/CVE-2016-5397
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2019:3140
- https://issues.apache.org/jira/browse/THRIFT-3893
- https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E
- https://web.archive.org/web/20210124141102/http://www.securityfocus.com/bid/103025
- http://mail-archives.apache.org/mod_mbox/thrift-user/201701.mbox/raw/%3CCANyrgvc3W%3DMJ9S-hMZecPNzxkyfgNmuSgVfW2hdDSz5ke%2BOPhQ%40mail.gmail.com%3E
CVE-2016-5397 · published · modified · JSON