Facebook Facebook Thrift
11 CVEs affecting Facebook Facebook Thrift. Latest disclosed: 2024-09-27. Critical: 1, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24028 | Critical | 9.8 | 2021-04-14 | An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects… |
CVE-2024-45773 | High | 7.5 | 2024-09-27 | A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirab… |
CVE-2019-11939 | High | 7.5 | 2020-03-18 | Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients co… |
CVE-2019-3553 | High | 7.5 | 2020-03-10 | C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could… |
CVE-2019-11938 | High | 7.5 | 2020-03-10 | Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients coul… |
CVE-2019-3565 | High | 7.5 | 2019-05-06 | Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result… |
CVE-2019-3564 | High | 7.5 | 2019-05-06 | Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short m… |
CVE-2019-3559 | High | 7.5 | 2019-05-06 | Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short… |
CVE-2019-3558 | High | 7.5 | 2019-05-06 | Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send sho… |
CVE-2019-3552 | High | 7.5 | 2019-05-06 | C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients coul… |
CVE-2024-45863 | Medium | 5.3 | 2024-09-27 | A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other unde… |