CVE-2019-3565

概要

参考情報

• securityfocus.com/bid/108280 · Third Party Advisory
• facebook/fbthrift commit 01686e1 · Patch
• lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
• facebook.com/security/advisories/cve-2019-3565 · Vendor Advisory

thrift のその他の脆弱性

• CVE-2021-24028緊急 9.8An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other un…
• CVE-2019-11939高 7.5Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, m…
• CVE-2019-3553高 7.5C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mali…
• CVE-2019-11938高 7.5Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mal…
• CVE-2019-3564高 7.5Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients…