Lucene search

K
osvGoogleOSV:GO-2021-0088
HistoryApr 14, 2021 - 8:04 p.m.

Denial of service via ignored unknown fields in github.com/facebook/fbthrift

2021-04-1420:04:52
Google
osv.dev
4

0.003 Low

EPSS

Percentile

70.0%

Skip ignores unknown fields, rather than failing. A malicious user can craft small messages with unknown fields which can take significant resources to parse. If a server accepts messages from an untrusted user, it may be used as a denial of service vector.

0.003 Low

EPSS

Percentile

70.0%