CVE-2019-11938

概要

参考情報

• facebook/fbthrift commit 08c2d41 · Patch
• facebook/fbthrift commit 71c97ff · Patch
• facebook.com/security/advisories/cve-2019-11938 · Vendor Advisory

thrift のその他の脆弱性

• CVE-2021-24028緊急 9.8An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other un…
• CVE-2019-11939高 7.5Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, m…
• CVE-2019-3553高 7.5C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mali…
• CVE-2019-3565高 7.5Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown …
• CVE-2019-3564高 7.5Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients…