Back to search
CVE-2019-3565
Published: May 6, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00.
| Vendor | Product | Versions |
|---|---|---|
Facebook Thrift | affected v2019.05.06.00affected unspecified - < v2019.05.06.00 |
Weaknesses (CWE)
References
https://www.facebook.com/security/advisories/cve-2019-3565
x_refsource_MISC
108280
vdb-entry
x_refsource_BID
[pulsar-commits] 20201215 [GitHub] [pulsar] yanshuchong opened a new issue #8967: CVSS issue list
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now