DEBIAN-CVE-2026-83745
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without checking that the bytes have arrived. A single ~14-byte frame therefore commits as much memory as it cares to declare -- measured at 513 MiB against the Node.js server and 2 GiB against the D transport -- and in the Node.js case the connection is left open afterwards, so the frame can simply be sent again. This issue affects Apache Thrift before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
DEBIAN-CVE-2026-83745
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:DEBIAN-CVE-2026-83745
thrift
Source reference: /affected/0/package/name
- Affected versions
- 0.17.0-2
Source reference:
/affected/0/versions0.17.0-3Source reference:
/affected/0/versions0.17.0-4Source reference:
/affected/0/versions0.18.1-1Source reference:
/affected/0/versions0.18.1-2Source reference:
/affected/0/versions0.19.0-1Source reference:
/affected/0/versions0.19.0-2Source reference:
/affected/0/versions0.19.0-2.1Source reference:
/affected/0/versions0.19.0-2.1~exp1Source reference:
/affected/0/versions0.19.0-3Source reference:
/affected/0/versions0.19.0-4Source reference:
/affected/0/versions0.20.0-1Source reference:
/affected/0/versions0.22.0-1Source reference:
/affected/0/versions0.22.0-2Source reference:
/affected/0/versions0.22.0-3Source reference:
/affected/0/versions0.22.0-4Source reference:
/affected/0/versions0.23.0-1Source reference:
/affected/0/versions0.23.0-2Source reference:
/affected/0/versions0.23.0-3Source reference:
/affected/0/versions0.24.0-1Source reference:
/affected/0/versions0.24.0-2Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
thrift
Source reference: /affected/1/package/name
- Affected versions
- 0.19.0-4
Source reference:
/affected/1/versions0.20.0-1Source reference:
/affected/1/versions0.22.0-1Source reference:
/affected/1/versions0.22.0-2Source reference:
/affected/1/versions0.22.0-3Source reference:
/affected/1/versions0.22.0-4Source reference:
/affected/1/versions0.23.0-1Source reference:
/affected/1/versions0.23.0-2Source reference:
/affected/1/versions0.23.0-3Source reference:
/affected/1/versions0.24.0-1Source reference:
/affected/1/versions0.24.0-2Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
thrift
Source reference: /affected/2/package/name
- Affected versions
- 0.19.0-4
Source reference:
/affected/2/versions0.20.0-1Source reference:
/affected/2/versions0.22.0-1Source reference:
/affected/2/versions0.22.0-2Source reference:
/affected/2/versions0.22.0-3Source reference:
/affected/2/versions0.22.0-4Source reference:
/affected/2/versions0.23.0-1Source reference:
/affected/2/versions0.23.0-2Source reference:
/affected/2/versions0.23.0-3Source reference:
/affected/2/versions0.24.0-1Source reference:
/affected/2/versions0.24.0-2Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "thrift",
"purl": "pkg:deb/debian/thrift?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"0.17.0-2",
"0.17.0-3",
"0.17.0-4",
"0.18.1-1",
"0.18.1-2",
"0.19.0-1",
"0.19.0-2",
"0.19.0-2.1",
"0.19.0-2.1~exp1",
"0.19.0-3",
"0.19.0-4",
"0.20.0-1",
"0.22.0-1",
"0.22.0-2",
"0.22.0-3",
"0.22.0-4",
"0.23.0-1",
"0.23.0-2",
"0.23.0-3",
"0.24.0-1",
"0.24.0-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-83745.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "thrift",
"purl": "pkg:deb/debian/thrift?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"0.19.0-4",
"0.20.0-1",
"0.22.0-1",
"0.22.0-2",
"0.22.0-3",
"0.22.0-4",
"0.23.0-1",
"0.23.0-2",
"0.23.0-3",
"0.24.0-1",
"0.24.0-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-83745.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "thrift",
"purl": "pkg:deb/debian/thrift?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"0.19.0-4",
"0.20.0-1",
"0.22.0-1",
"0.22.0-2",
"0.22.0-3",
"0.22.0-4",
"0.23.0-1",
"0.23.0-2",
"0.23.0-3",
"0.24.0-1",
"0.24.0-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-83745.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
}
]- Related CVEs
- CVE-2026-83745
Source reference:
/upstream
Publisher severity
high
Source reference: /severity/0/score
- Event
- #72914 · Revision 1
- Added to Heist Feed
- Publisher date