Not rated
CVE-2019-3558 Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type
Description
Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Facebook Thrift 2019.02 | earliest → 2019.02.18.00 | 2019.02.18.00 |
Other CVEs of Facebook Thrift
The 11 CVEs of Facebook Thrift →
CVE-2024-45863
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to…
5.3
Medium
CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially…
7.5
High
CVE-2021-24028
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code…
Not rated
CVE-2019-11939
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the…
Not rated