Skip to content
OpenAdvisories
Unscored CVE-2019-3553 EUVD-2019-13190GHSA-859v-9mcv-7rw3

C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mal…

Published Mar 10, 2020 · Updated Aug 4, 2024 · Assigned by facebook

Description

C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.02.03.00.

Affected products

VendorProductAffectedFixed
Facebook Facebook Thrift unspecified – < v2020.02.03.00 v2020.02.03.00

References