CVE-2019-11939

Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects...

CVE-2019-11939

CVE-2019-11939 affects Golang Facebook Thrift servers. The vulnerability arises when servers preallocate memory for the declared message size without verifying actual size, allowing a malicious client to trigger large memory allocations and cause a denial of service. It impacts Facebook Thrift pr...