Apache Thrift 软件框架的 Java 语言支持 libthrift-java 中发现存在绕过 SASL 协商 isComplete 验证的可能。生产环境设置中可能会禁用原本用于确定 SASL 握手是否已成功完成的断言，造成验证不完整。对于 Debian 8“Jessie”，此问题已在 0.9.1-2~deb8u1 版本中修复。建议您升级 libthrift-java 程序包。注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动整理和排版。

據發現，可以繞過 libthrift-java (為 Apache Thrift 軟體架構提供的 Java 語言支援) 中的 SASL 協商 isComplete 驗證。可以在生產設定中停用用於確定 SASL 交握是否已成功完成的宣告，進而使驗證不完整。針對 Debian 8「Jessie」，此問題已在 0.9.1-2+deb8u1 版本中修正。建議您升級 libthrift-java 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

Apache ThriftソフトウェアフレームワークのJava言語サポートであるlibthift-javaで、SASLネゴシエーションのisComplete検証を回避できることが判明しました。SASLハンドシェイクが正常に完了したかどうかを判断するために使用されるアサートが、プロダクション設定で無効にされ、検証が完了しない可能性があります。

Debian 8「Jessie」では、この問題はバージョン0.9.1-2+deb8u1で修正されました。

お使いのlibthrift'javaパッケージをアップグレードすることを推奨します。

注: Tenable Network Securityは、前述の記述ブロックをDLAセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

It was discovered that it was possible to bypass SASL negotiation isComplete validation in libthrift-java, Java language support for the Apache Thrift software framework. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

For Debian 8 'Jessie', this problem has been fixed in version 0.9.1-2+deb8u1.

We recommend that you upgrade your libthrift-java packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the thrift packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The Apache Thrift Node.js static web server in versions     0.9.2 through 0.11.0 have been determined to contain a     security vulnerability in which a remote user has the     ability to access files outside the set webservers     docroot path.(CVE-2018-11798)

  - Apache Thrift Java client library versions 0.5.0     through 0.11.0 can bypass SASL negotiation isComplete     validation in the     org.apache.thrift.transport.TSaslTransport class. An     assert used to determine if the SASL handshake had     successfully completed could be disabled in production     settings making the validation     incomplete.(CVE-2018-1320)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the thrift packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Apache Thrift 0.9.3 to 0.12.0, a server implemented     in Go using TJSONProtocol or TSimpleJSONProtocol may     panic when feed with invalid input data.(CVE-2019-0210)

  - In Apache Thrift all versions up to and including     0.12.0, a server or client may run into an endless loop     when feed with specific input data. Because the issue     had already been partially fixed in version 0.11.0,     depending on the installed version it affects only     certain language bindings.(CVE-2019-0205)

  - Apache Thrift Java client library versions 0.5.0     through 0.11.0 can bypass SASL negotiation isComplete     validation in the     org.apache.thrift.transport.TSaslTransport class. An     assert used to determine if the SASL handshake had     successfully completed could be disabled in production     settings making the validation     incomplete.(CVE-2018-1320)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
121625	Debian DLA-1662-1：libthrift-java 安全更新	Nessus	Debian Local Security Checks	2019/2/7	2024/6/24	high
121625	Debian DLA-1662-1：libthrift-java 安全性更新	Nessus	Debian Local Security Checks	2019/2/7	2024/6/24	high
121625	DebianDLA-1662-1: libthift-javaのセキュリティ更新プログラム	Nessus	Debian Local Security Checks	2019/2/7	2024/6/24	high
121625	Debian DLA-1662-1 : libthrift-java security update	Nessus	Debian Local Security Checks	2019/2/7	2024/6/24	high
124961	EulerOS Virtualization 3.0.1.0 : thrift (EulerOS-SA-2019-1458)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/22	high
147467	EulerOS Virtualization 3.0.6.6 : thrift (EulerOS-SA-2021-1457)	Nessus	Huawei Local Security Checks	2021/3/10	2021/3/16	high

检测

插件搜索

high

high

high

high

high

high