5.3
Medium
CVE-2024-45863 A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to…
Description
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Facebook Thrift 2024.09 | 2024.09.09.00 → < 2024.09.23.00 | 2024.09.23.00 |
| thrift 2024.09 | 2024.09.09.00 → < 2024.09.23.00 | 2024.09.23.00 |
Other CVEs of Facebook Thrift
The 11 CVEs of Facebook Thrift →
CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially…
7.5
High
CVE-2021-24028
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code…
Not rated
CVE-2019-11939
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the…
Not rated
CVE-2019-3553
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the…
Not rated