diff --git a/src/thrift_0_13_0/Makefile b/src/thrift_0_13_0/Makefile
index 3bdb7c2a14..38a7d939d0 100644
--- a/src/thrift_0_13_0/Makefile
+++ b/src/thrift_0_13_0/Makefile
@@ -26,6 +26,7 @@ $(addprefix $(DEST)/, $(MAIN_TARGET)): $(DEST)/% :
 	patch -p1 < ../patch/0001-Remove-unneeded-packages.patch
 	patch -p1 < ../patch/0002-Remove-minimist-packages.patch
 	patch -p1 < ../patch/0003-Remove-underscore-packages.patch
+	patch -p1 < ../patch/0002-cve-2017-1000487.patch
 	DEB_BUILD_OPTIONS=nocheck dpkg-buildpackage -d -rfakeroot -b -us -uc -j$(SONIC_CONFIG_MAKE_JOBS) --admindir $(SONIC_DPKG_ADMINDIR)
 	popd
 
diff --git a/src/thrift_0_13_0/patch/0002-cve-2017-1000487.patch b/src/thrift_0_13_0/patch/0002-cve-2017-1000487.patch
new file mode 120000
index 0000000000..ef66070640
--- /dev/null
+++ b/src/thrift_0_13_0/patch/0002-cve-2017-1000487.patch
@@ -0,0 +1 @@
+../../thrift/patch/0002-cve-2017-1000487.patch
\ No newline at end of file