Apache Thrift up to 0.12.0 Loop 拒绝服务漏洞

CVE编号

CVE-2019-0205

利用情况

暂无

补丁情况

官方补丁

披露时间

2019-10-30

漏洞描述

在Apache Thrift所有0.12.0（含）以下的版本中，服务器或客户端在馈入特定输入数据时可能会陷入无限循环。由于此问题已在版本0.11.0中得到部分修复，因此取决于所安装的版本，它仅影响某些语言绑定。

解决建议

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
http://mail-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/

参考链接
http://mail-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/%3CVI1PR0101M...
https://access.redhat.com/errata/RHSA-2020:0804
https://access.redhat.com/errata/RHSA-2020:0805
https://access.redhat.com/errata/RHSA-2020:0806
https://access.redhat.com/errata/RHSA-2020:0811
https://lists.apache.org/thread.html/003ac686189e6ce7b99267784d04bf60059a8c32...
https://lists.apache.org/thread.html/07bd68ad237a5d513751d6d2731a8828f902c738...
https://lists.apache.org/thread.html/0d058e1bfd11727c4f2e2adf4b6e403a47c38e22...
https://lists.apache.org/thread.html/1193444c17f499f92cd198d464a2c1ffc92182c8...
https://lists.apache.org/thread.html/1c18ec6ebfea0a9211992be952e8b33d0fda202c...
https://lists.apache.org/thread.html/3dfa054b89274c9109c26ed1843ca15a14c03786...
https://lists.apache.org/thread.html/928cae83d20d8d8196c26118f7084aa37573e1d3...
https://lists.apache.org/thread.html/9f7150d0b02e72d1154721a412e80cf797f1b7cf...
https://lists.apache.org/thread.html/a9669756befaeb0f8e08766d3f4d410a0fce85da...
https://lists.apache.org/thread.html/r0c606d4be9aa163d132edf8edd8eb55e7b94640...
https://lists.apache.org/thread.html/r0d08f5576286f4a042aabde13ecf58979644f6d...
https://lists.apache.org/thread.html/r137753c9df8dd9065bea27a26af49aadc406b5a...
https://lists.apache.org/thread.html/r1b1a92c229ead94d53b3bcde9e624d002b54f1c...
https://lists.apache.org/thread.html/r228ac842260c2c516af7b09f3cf4cf76e5b9c00...
https://lists.apache.org/thread.html/r2832722c31d78bef7526e2c701ba4b046736e4c...
https://lists.apache.org/thread.html/r36581cc7047f007dd6aadbdd34e18545ec2c1eb...
https://lists.apache.org/thread.html/r3887b48b183b6fa43e59398bd170a99239c0a16...
https://lists.apache.org/thread.html/r4633082b834eebccd0d322697651d931ab10ca9...
https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410...
https://lists.apache.org/thread.html/r50bf84c60867574238d18cdad5da9f303b61811...
https://lists.apache.org/thread.html/r53c03e1c979b9c628d0d65e0f49dd9a9f9d7572...
https://lists.apache.org/thread.html/r55609613abab203a1f2c1f3de050b63ae8f5c4a...
https://lists.apache.org/thread.html/r569b2b3da41ff45bfacfca6787a4a8728edd556...
https://lists.apache.org/thread.html/r573029c2f8632e3174b9eea7cd57f9c9df33f2f...
https://lists.apache.org/thread.html/r67a704213d13326771f46c84bbd84c8281bb939...
https://lists.apache.org/thread.html/r73a3c8b80765e3d2430ff51f22b778d0c917919...
https://lists.apache.org/thread.html/r7859e767c90c8f4971dec50f801372aa64e88f1...
https://lists.apache.org/thread.html/r92b7771afee2625209c36727fefdc77033964e9...
https://lists.apache.org/thread.html/r934f312dd5add7276ac2de684d8b237554ff9f3...
https://lists.apache.org/thread.html/rab740e5c70424ef79fd095a4b076e752109aeee...
https://lists.apache.org/thread.html/rb139fa1d2714822d8c6e6f3bd6f5d5c91844d31...
https://lists.apache.org/thread.html/rba61c1f3a3b1960a6a694775b1a437751eba082...
https://lists.apache.org/thread.html/rce0d368a78b42c545f26c2e6e91e2b8a91b27b6...
https://lists.apache.org/thread.html/re387dc6ca11cb0b0ce4de8e800bb91ca50fee05...
https://lists.apache.org/thread.html/rf359e5cc6a185494fc0cfe837fe82f7db2ef492...
https://security.gentoo.org/glsa/202107-32
https://www.oracle.com//security-alerts/cpujul2021.html

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	apache	thrift	*		Up to (including) 0.12.0
	运行在以下环境
	系统	debian_10	thrift	*		Up to (excluding) 0.11.0-4

阿里云评分 3.1

• 攻击路径 远程
• 攻击复杂度 复杂
• 权限要求 无需权限
• 影响范围 有限影响
• EXP成熟度 未验证
• 补丁情况 官方补丁
• 数据保密性 无影响
• 数据完整性 无影响
• 服务器危害 无影响
• 全网数量 100

CWE-ID 漏洞类型 CWE-835 不可达退出条件的循环（无限循环）