CVE-2015-3254: Apache Thrift

Medium severity, CVSS 6.5. EPSS: 5.3% chance of exploitation in the next 30 days.

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.

Affected products

• Apache Thrift: up to and including 0.9.2

Published 2017-06-16. Last modified 2026-06-17.