CVE-2019-3559

概要

参考情報

• facebook/fbthrift commit a56346c · Patch
• lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
• facebook.com/security/advisories/cve-2019-3559 · Vendor Advisory

thrift のその他の脆弱性

• CVE-2021-24028緊急 9.8An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other un…
• CVE-2019-11939高 7.5Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, m…
• CVE-2019-3553高 7.5C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mali…
• CVE-2019-11938高 7.5Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mal…
• CVE-2019-3565高 7.5Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown …