UBUNTU-CVE-2026-83745

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-83745
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-83745.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-83745
Upstream
  • CVE-2026-83745
Published
2026-10-05T00:00:00Z
Modified
2026-10-05T13:04:13Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without checking that the bytes have arrived. A single ~14-byte frame therefore commits as much memory as it cares to declare -- measured at 513 MiB against the Node.js server and 2 GiB against the D transport -- and in the Node.js case the connection is left open afterwards, so the frame can simply be sent again. This issue affects Apache Thrift before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

References

Affected packages

Ubuntu:20.04:LTS / thrift

Package

Name
thrift
Purl
pkg:deb/ubuntu/thrift?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.11.0-6
0.13.0-2build1
0.13.0-2build2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "golang-thrift-dev",
            "binary_version": "0.13.0-2build2"
        },
        {
            "binary_name": "libthrift-0.13.0",
            "binary_version": "0.13.0-2build2"
        },
        {
            "binary_name": "libthrift-c-glib0",
            "binary_version": "0.13.0-2build2"
        },
        {
            "binary_name": "libthrift-perl",
            "binary_version": "0.13.0-2build2"
        },
        {
            "binary_name": "php-thrift",
            "binary_version": "0.13.0-2build2"
        },
        {
            "binary_name": "python3-thrift",
            "binary_version": "0.13.0-2build2"
        },
        {
            "binary_name": "thrift-compiler",
            "binary_version": "0.13.0-2build2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-83745.json"

Ubuntu:22.04:LTS / thrift

Package

Name
thrift
Purl
pkg:deb/ubuntu/thrift?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.13.0-6ubuntu1
0.13.0-6ubuntu2
0.13.0-6ubuntu3
0.13.0-7
0.16.0-2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "golang-thrift-dev",
            "binary_version": "0.16.0-2"
        },
        {
            "binary_name": "libthrift-0.16.0",
            "binary_version": "0.16.0-2"
        },
        {
            "binary_name": "libthrift-c-glib0",
            "binary_version": "0.16.0-2"
        },
        {
            "binary_name": "libthrift-perl",
            "binary_version": "0.16.0-2"
        },
        {
            "binary_name": "php-thrift",
            "binary_version": "0.16.0-2"
        },
        {
            "binary_name": "python3-thrift",
            "binary_version": "0.16.0-2"
        },
        {
            "binary_name": "thrift-compiler",
            "binary_version": "0.16.0-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-83745.json"

Ubuntu:24.04:LTS / thrift

Package

Name
thrift
Purl
pkg:deb/ubuntu/thrift?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.17.0-4
0.19.0-2
0.19.0-2build1
0.19.0-2.1build4
0.19.0-2.1build5

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "golang-thrift-dev",
            "binary_version": "0.19.0-2.1build5"
        },
        {
            "binary_name": "libthrift-0.19.0t64",
            "binary_version": "0.19.0-2.1build5"
        },
        {
            "binary_name": "libthrift-c-glib0t64",
            "binary_version": "0.19.0-2.1build5"
        },
        {
            "binary_name": "libthrift-perl",
            "binary_version": "0.19.0-2.1build5"
        },
        {
            "binary_name": "php-thrift",
            "binary_version": "0.19.0-2.1build5"
        },
        {
            "binary_name": "python3-thrift",
            "binary_version": "0.19.0-2.1build5"
        },
        {
            "binary_name": "thrift-compiler",
            "binary_version": "0.19.0-2.1build5"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-83745.json"

Ubuntu:26.04:LTS / thrift

Package

Name
thrift
Purl
pkg:deb/ubuntu/thrift?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.19.0-4build1
0.22.0-3
0.22.0-3ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "golang-thrift-dev",
            "binary_version": "0.22.0-3ubuntu1"
        },
        {
            "binary_name": "libthrift-0.22.0",
            "binary_version": "0.22.0-3ubuntu1"
        },
        {
            "binary_name": "libthrift-c-glib0t64",
            "binary_version": "0.22.0-3ubuntu1"
        },
        {
            "binary_name": "libthrift-perl",
            "binary_version": "0.22.0-3ubuntu1"
        },
        {
            "binary_name": "php-thrift",
            "binary_version": "0.22.0-3ubuntu1"
        },
        {
            "binary_name": "python3-thrift",
            "binary_version": "0.22.0-3ubuntu1"
        },
        {
            "binary_name": "thrift-compiler",
            "binary_version": "0.22.0-3ubuntu1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-83745.json"