Vulnerabilities

TI-2021-06345 CVE-2021-24028 · GHSA-qrr3-c36x-2pcc

An invalid free in Thrift's table-based serialization can cause the application to crash…

MEDIUM 46

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01746 Published 2021-04-13 Fixed in v2021.02.22.00 CWE-763

TI-2019-08944 CVE-2019-11939 · GHSA-w3r9-r9w7-8h48

Resource allocation without limits in Meta Facebook Thrift

LOW 36

Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01557 Published 2020-03-18 Partial fix · v2020.03.16.00, 0.31.1-0.20200311080807-483ed864d69f CWE-770

TI-2019-02619 CVE-2019-3553 · GHSA-859v-9mcv-7rw3

Resource allocation without limits in Meta Facebook Thrift

LOW 37

C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02128 Published 2020-03-10 Fixed in v2020.02.03.00 CWE-770

TI-2019-08943 CVE-2019-11938 · GHSA-hr4p-8hm2-w85x

Resource allocation without limits in Meta Facebook Thrift

LOW 37

Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02252 Published 2020-03-10 Fixed in v2019.12.09.00 CWE-770

TI-2019-02630 CVE-2019-3565 · GHSA-j98f-h9mx-xrxq

Improper handling of exceptional conditions in Meta Facebook Thrift

LOW 38

Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02813 Published 2019-05-06 Fixed in v2019.05.06.00 CWE-834

TI-2019-02629 CVE-2019-3564 · GHSA-x4rg-4545-4w7w

Improper handling of exceptional conditions in Meta Facebook Thrift

LOW 37

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01994 Published 2019-05-06 Fixed in v2019.03.04.00, 0.31.1-0.20190225164308-c461c1bd1a3e CWE-834

TI-2019-02624 CVE-2019-3559 · GHSA-6627-jcx5-j2g8

Improper handling of exceptional conditions in Meta Facebook Thrift

LOW 37

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01994 Published 2019-05-06 Fixed in v2019.02.18.00 CWE-834

TI-2019-02623 CVE-2019-3558 · GHSA-7vv7-v9gp-whmr

Improper handling of exceptional conditions in Meta Facebook Thrift

LOW 37

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02021 Published 2019-05-06 Fixed in v2019.02.18.00 CWE-834

TI-2019-02618 CVE-2019-3552 · GHSA-h27g-g76x-xqpw

Improper handling of exceptional conditions in Meta Facebook Thrift

LOW 37

C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01982 Published 2019-05-06 Fixed in v2019.02.18.00 CWE-834

Vulnerabilities

Filters