CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-45863
https://notcve.org/view.php?id=CVE-2024-45863
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00. • https://www.facebook.com/security/advisories/cve-2024-45863 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-45773
https://notcve.org/view.php?id=CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00. • https://www.facebook.com/security/advisories/cve-2024-45773 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-24028
https://notcve.org/view.php?id=CVE-2021-24028
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00. Una liberación no válida en la serialización basada en tablas de Thrift puede causar que la aplicación se bloquee o potencialmente resultar en una ejecución de código u otros efectos no deseados. Este problema afecta a Facebook Thrift versiones anteriores a v2021.02.22.00 • https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339 https://www.facebook.com/security/advisories/cve-2021-24028 • CWE-763: Release of Invalid Pointer or Reference •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-11939
https://notcve.org/view.php?id=CVE-2019-11939
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00. Los servidores de Golang Facebook Thrift, no se equivocarían tras recibir mensajes declarando contenedores de tamaños más grandes que la carga útil. Como resultado, unos clientes maliciosos podrían enviar mensajes cortos que resultaría en una asignación de memoria considerable, conllevando potencialmente a una denegación de servicio. • https://github.com/facebook/fbthrift/commit/483ed864d69f307e9e3b9dadec048216100c0757 https://www.facebook.com/security/advisories/cve-2019-11939 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-3553
https://notcve.org/view.php?id=CVE-2019-3553
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.02.03.00. Los servidores de C ++ Facebook Thrift no se equivocarían tras recibir mensajes que declaran contenedores de tamaños más grandes que la carga útil. Como resultado, clientes maliciosos podrían enviar mensajes cortos que resultarían en una asignación de memoria considerable, conllevando potencialmente a una denegación de servicio. • https://github.com/facebook/fbthrift/commit/3f156207e8a6583d88999487e954320dc18955e6 https://github.com/facebook/fbthrift/commit/c9a903e5902834e95bbd4ab0e9fa53ba0189f351 https://www.facebook.com/security/advisories/cve-2019-3553 • CWE-770: Allocation of Resources Without Limits or Throttling •