DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift Tempo (Apache Thrift): Mehrere Schwachstellen
view advisory published 2026-05-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Tempo ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41607US | — | — | ||
Out-of-bounds Read vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue. | ||||
| CVE-2026-41606US | — | — | ||
Uncontrolled Recursion vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue. | ||||
| CVE-2026-41605US | — | — | ||
Integer Overflow or Wraparound vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes th… | ||||
| CVE-2026-41604US | — | — | ||
Out-of-bounds Read vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue. | ||||
| CVE-2026-41603US | — | — | ||
Rejected reason: This CVE ID is Rejected and will not be used. The record incorrectly described the affected language binding and fixed version. Use CVE-2026-66053, which was assig… | ||||
| CVE-2026-41602US | — | — | ||
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation
This issue affects Apache Thrift: before 0.23.0.
Users are recommended t… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:14885 vom 2026-05-07external
- Red Hat Security Advisory RHSA-2026:21769 vom 2026-05-28external
- Red Hat Security Advisory RHSA-2026:22347 vom 2026-06-02external
- Red Hat Security Advisory RHSA-2026:22423 vom 2026-06-02external
- Red Hat Security Advisory RHSA-2026:24503 vom 2026-06-08external
- Red Hat Security Advisory RHSA-2026:24539 vom 2026-06-08external
- Red Hat Security Advisory RHSA-2026:59395 vom 2026-08-25external
- Red Hat Security Advisory RHSA-2026:59396 vom 2026-08-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan