This vulnerability involves an integer overflow or wraparound in the Apache Thrift TFramedTransport implementation in Go, affecting all versions prior to 0.23.0. The flaw can lead to a denial of service condition. The Apache Software Foundation fixed the issue in version 0.23.0. Red Hat has issued multiple advisories referencing this CVE and providing security updates for affected products. No known exploits in the wild have been reported. The vulnerability has a CVSS v3.1 base score of 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to availability.

The vulnerability can be exploited remotely without authentication or user interaction to cause a denial of service (availability impact) due to integer overflow or wraparound in the affected component. There is no reported confidentiality or integrity impact. No known exploits in the wild have been observed.

A fix is available in Apache Thrift version 0.23.0. Users should upgrade to this version to remediate the vulnerability. Red Hat has released security advisories and updates addressing this issue for their affected products. Patch status is confirmed by vendor advisories. No additional mitigation steps are specified beyond applying the official update.