GO-2021-0101

    Dashboard / Vulnerabilities / GO-2021-0101

    GO-2021-0101

    Published: 28 Jul 2021Last Modified: 16 Jun 2026

    Summary: Panic due to out-of-bounds read in github.com/apache/thrift

    Details: Due to an improper bounds check, parsing maliciously crafted messages can cause panics. If this package is used to parse untrusted input, this may be used as a vector for a denial of service attack.

    References: https://github.com/apache/thrift/commit/264a3f318ed3e9e51573f67f963c8509786bcec2

    Affected packages

    Package

    Name: github.com/apache/thrift

    Purl: pkg:golang/github.com/apache/thrift

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0.0.0-20151001171628-53dd39833a08
    Fixed -0.13.0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GO-2021-0101 | CVE-DB