Non notée
CVE-2019-11939 Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the…
Description
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Facebook Thrift 2020.03 | premières → < 2020.03.16.00 | 2020.03.16.00 |
Autres CVE de Facebook Thrift
Les 11 CVE de Facebook Thrift →
CVE-2024-45863
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to…
5.3
Moyenne
CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially…
7.5
Élevée
CVE-2021-24028
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code…
Non notée
CVE-2019-3553
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the…
Non notée