In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.13.0-2build1", "binary_name": "golang-thrift-dev" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-0.13.0" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-0.13.0-dbgsym" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-c-glib-dev" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-c-glib0" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-c-glib0-dbgsym" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-dev" }, { "binary_version": "0.13.0-2build1", "binary_name": "libthrift-perl" }, { "binary_version": "0.13.0-2build1", "binary_name": "php-thrift" }, { "binary_version": "0.13.0-2build1", "binary_name": "php-thrift-dbgsym" }, { "binary_version": "0.13.0-2build1", "binary_name": "python3-thrift" }, { "binary_version": "0.13.0-2build1", "binary_name": "python3-thrift-dbg" }, { "binary_version": "0.13.0-2build1", "binary_name": "thrift-compiler" }, { "binary_version": "0.13.0-2build1", "binary_name": "thrift-compiler-dbgsym" } ] }