| Package | Affected versions | Patched versions |
|---|---|---|
| thrift | < 2019.12.09.00 | 2019.12.09.00 |
Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.12.09.00.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free