Medium severity6.5NVD Advisory· Published Jun 16, 2017· Updated Jun 17, 2026

CVE-2015-3254

Description

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Thrift2 versions
cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*range: <=0.9.2
- (no CPE)range: <0.9.3

Patches

Vulnerability mechanics

References

issues.apache.org/jira/browse/THRIFT-3231nvdIssue TrackingPatchVendor Advisory
grokbase.com/t/thrift/user/15c2tss3td/notice-apache-thrift-security-vulnerability-cve-2015-1774nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/99112nvd
access.redhat.com/errata/RHSA-2017:2477nvd
access.redhat.com/errata/RHSA-2017:3115nvd
mail-archives.apache.org/mod_mbox/thrift-user/201512.mbox/%3CCANyrgvcjvEcjTVmaL+tVXCBm4o5G+1neu=MUubD9GbU85bO_Ew%40mail.gmail.com%3Envd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000