Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

Red Hat OpenShift distributed tracing 3.9.2

Source -

ADP

CNA CVEs -

0

ADP CVEs -

6

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
6Vulnerabilities found
CVE-2026-41607
Assigner-Apache Software Foundation
ShareView Details
Assigner-Apache Software Foundation
CVSS Score-6.5||MEDIUM
EPSS-0.93% / 56.68%
||
7 Day CHG-0.04%
Published-28 Apr, 2026 | 09:21
Updated-21 Jul, 2026 | 12:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Apache Thrift: C++ JSON OOB read

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Action-Not Available
Vendor-Red Hat, Inc.The Apache Software Foundation
Product-thriftApache ThriftOpenShift Service Mesh 2Red Hat OpenShift Container Platform 4Red Hat OpenShift distributed tracing 3Red Hat Advanced Cluster Management for Kubernetes 2.15Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat AI Inference ServerRed Hat OpenShift distributed tracing 3.9.2Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift GitOpsRed Hat multicluster global hub 1.5.2Red Hat OpenShift AI (RHOAI)Red Hat Advanced Cluster Management for Kubernetes 2.14Multicluster Global Hub 1.4.5
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-41606
Assigner-Apache Software Foundation
ShareView Details
Assigner-Apache Software Foundation
CVSS Score-5.3||MEDIUM
EPSS-1.10% / 62.06%
||
7 Day CHG-0.04%
Published-28 Apr, 2026 | 09:21
Updated-21 Jul, 2026 | 12:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Apache Thrift: c_glib dispatch stack overflow

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Action-Not Available
Vendor-Red Hat, Inc.The Apache Software Foundation
Product-thriftApache ThriftOpenShift Service Mesh 2Red Hat OpenShift Container Platform 4Red Hat OpenShift distributed tracing 3Red Hat Advanced Cluster Management for Kubernetes 2.15Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat AI Inference ServerRed Hat OpenShift distributed tracing 3.9.2Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift GitOpsRed Hat multicluster global hub 1.5.2Red Hat OpenShift AI (RHOAI)Red Hat Advanced Cluster Management for Kubernetes 2.14Multicluster Global Hub 1.4.5
CWE ID-CWE-606
Unchecked Input for Loop Condition
CWE ID-CWE-674
Uncontrolled Recursion
CVE-2026-41605
Assigner-Apache Software Foundation
ShareView Details
Assigner-Apache Software Foundation
CVSS Score-7.3||HIGH
EPSS-0.93% / 56.68%
||
7 Day CHG-0.04%
Published-28 Apr, 2026 | 09:20
Updated-21 Jul, 2026 | 12:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Apache Thrift: Swift Compact Protocol integer overflow

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Action-Not Available
Vendor-Red Hat, Inc.The Apache Software Foundation
Product-thriftApache ThriftOpenShift Service Mesh 2Red Hat OpenShift Container Platform 4Red Hat OpenShift distributed tracing 3Red Hat Advanced Cluster Management for Kubernetes 2.15Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat AI Inference ServerRed Hat OpenShift distributed tracing 3.9.2Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift GitOpsRed Hat multicluster global hub 1.5.2Red Hat OpenShift AI (RHOAI)Red Hat Advanced Cluster Management for Kubernetes 2.14Multicluster Global Hub 1.4.5
CWE ID-CWE-190
Integer Overflow or Wraparound
CVE-2026-41604
Assigner-Apache Software Foundation
ShareView Details
Assigner-Apache Software Foundation
CVSS Score-8.2||HIGH
EPSS-0.92% / 56.30%
||
7 Day CHG-0.04%
Published-28 Apr, 2026 | 09:20
Updated-21 Jul, 2026 | 12:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Apache Thrift: Swift Range crash in skip()

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Action-Not Available
Vendor-Red Hat, Inc.The Apache Software Foundation
Product-thriftApache ThriftOpenShift Service Mesh 2Red Hat OpenShift Container Platform 4Red Hat OpenShift distributed tracing 3Red Hat Advanced Cluster Management for Kubernetes 2.15Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat AI Inference ServerRed Hat OpenShift distributed tracing 3.9.2Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift GitOpsRed Hat multicluster global hub 1.5.2Red Hat OpenShift AI (RHOAI)Red Hat Advanced Cluster Management for Kubernetes 2.14Multicluster Global Hub 1.4.5
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-41603
Assigner-Apache Software Foundation
ShareView Details
Assigner-Apache Software Foundation
CVSS Score-7.4||HIGH
EPSS-0.57% / 43.49%
||
7 Day CHG-0.02%
Published-28 Apr, 2026 | 09:19
Updated-21 Jul, 2026 | 12:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Apache Thrift: Java TSSLTransportFactory hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Action-Not Available
Vendor-Red Hat, Inc.The Apache Software Foundation
Product-thriftApache ThriftOpenShift Service Mesh 2Red Hat OpenShift Container Platform 4Red Hat OpenShift distributed tracing 3Red Hat Advanced Cluster Management for Kubernetes 2.15Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat AI Inference ServerRed Hat OpenShift distributed tracing 3.9.2Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift GitOpsRed Hat multicluster global hub 1.5.2Red Hat OpenShift AI (RHOAI)Red Hat Advanced Cluster Management for Kubernetes 2.14Multicluster Global Hub 1.4.5
CWE ID-CWE-295
Improper Certificate Validation
CWE ID-CWE-297
Improper Validation of Certificate with Host Mismatch
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2026-41602
Assigner-Apache Software Foundation
ShareView Details
Assigner-Apache Software Foundation
CVSS Score-7.5||HIGH
EPSS-1.16% / 63.74%
||
7 Day CHG~0.00%
Published-28 Apr, 2026 | 09:19
Updated-21 Jul, 2026 | 12:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Apache Thrift: Go TFramedTransport uint32 overflow

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Action-Not Available
Vendor-Red Hat, Inc.The Apache Software Foundation
Product-thriftApache ThriftOpenShift Service Mesh 2Red Hat OpenStack Platform 18.0Red Hat Advanced Cluster Management for Kubernetes 2.15Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat Advanced Cluster Management for Kubernetes 2.16Red Hat AI Inference ServerRed Hat OpenShift distributed tracing 3.9.2Red Hat Ceph Storage 5Red Hat Advanced Cluster Management for Kubernetes 2.14Multicluster Global HubRed Hat OpenShift Container Platform 4Red Hat Ceph Storage 9Multicluster Global Hub 1.7.0Red Hat OpenShift GitOpsRed Hat multicluster global hub 1.5.2Red Hat Ceph Storage 6Red Hat OpenShift AI (RHOAI)Multicluster Global Hub 1.4.5
CWE ID-CWE-190
Integer Overflow or Wraparound