Skip to content
OpenAdvisories

Package · Go

github.com/facebook/fbthrift

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-11939

    Golang Facebook Thrift servers vulnerable to denial of service

    Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to deni…

    Facebook Facebook Thrift thrift github.com/facebook/fbthrift Ubuntu Go
  • High 7.5
    CVE-2019-3564

    Improper Input Validation and Excessive Iteration in Go Facebook Thrift

    Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of servi…

    Facebook Facebook Thrift github.com/facebook/fbthrift golang-github-uber-go-tally Ubuntu Go