Non notée
CVE-2019-3558 Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type
Description
Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Facebook Thrift 2019.02 | premières → 2019.02.18.00 | 2019.02.18.00 |
Autres CVE de Facebook Thrift
Les 11 CVE de Facebook Thrift →
CVE-2024-45863
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to…
5.3
Moyenne
CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially…
7.5
Élevée
CVE-2021-24028
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code…
Non notée
CVE-2019-11939
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the…
Non notée