In breve
- CVE-2019-11939 è una vulnerabilità ALTO (CVSS 7.5) che riguarda github.com/facebook/fbthrift, thrift (facebook).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.2% delle vulnerabilità.
- Correzione: aggiornare a 0.31.1-0.20200311080807-483ed864d69f, 2020.03.16.00 o successiva.
| Package | Affected versions | Patched versions |
|---|
| github.com/facebook/fbthrift Go | < 0.31.1-0.20200311080807-483ed864d69f
| 0.31.1-0.20200311080807-483ed864d69f
|
| thrift | < 2020.03.16.00
| 2020.03.16.00
|
Description
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.
Specific Go Packages Affected
github.com/facebook/fbthrift/thrift/lib/go/thrift
NVD description
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.
Altre vulnerabilità di github.com/facebook/fbthrift
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free