CVE-2016-5397 PUBLISHED

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

EPSS 22.57% · 95.8th percentile

Risk Scores

EPSS Score
22.57%
95.8th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSthrift-compiler0, 0.9.1-2.1
Ubuntu:16.04:LTSthrift-compiler0, 0.9.1-2

Timeline

References

Open in Interactive Console →