Lucene search

K
fedoraFedoraFEDORA:3D4C620BA684
HistoryOct 24, 2023 - 1:23 a.m.

[SECURITY] Fedora 38 Update: fbthrift-2023.10.16.00-1.fc38

2023-10-2401:23:49
lists.fedoraproject.org
14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.72 High

EPSS

Percentile

98.0%

Thrift is a serialization and RPC framework for service communication. Thri ft enables these features in all major languages, and there is strong support for C++, Python, Hack, and Java. Most services at Facebook are written using Th rift for RPC, and some storage systems use Thrift for serializing records on dis k. Facebook Thrift is not a distribution of Apache Thrift. This is an evolved internal branch of Thrift that Facebook re-released to open source communit y in February 2014. Facebook Thrift was originally released closely tracking Apa che Thrift but is now evolving in new directions. In particular, the compiler w as rewritten from scratch and the new implementation features a fully asynchro nous Thrift server.

OSVersionArchitecturePackageVersionFilename
Fedora38anyfbthrift< 2023.10.16.00UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.72 High

EPSS

Percentile

98.0%