CVE-2018-1320

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

References

Affected packages

Git / github.com/apache/thrift

Affected ranges

Type

GIT

Repo

https://github.com/apache/thrift

Events

Introduced

8de1e90b4b5e4cccfd8f0534d9c141cff938c833

Last affected

327ebb6c2b6df8bf075da02ef45a2a034e9b79ba

Database specific

{
    "versions": [
        {
            "introduced": "0.5.0"
        },
        {
            "last_affected": "0.11.0"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1320.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.0.0"
            },
            {
                "last_affected": "5.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "11.2.0.3.23"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.2.0.1.0"
            },
            {
                "fixed": "12.2.0.1.19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.9.4.0.0"
            },
            {
                "fixed": "13.9.4.2.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "19.3.12"
            }
        ]
    }
]