CVE-2019-3552

C++ Facebook Thrift servers using cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects...

CVE-2019-3552

CVE-2019-3552 affects Facebook Thrift servers (cpp2). The issue occurs when the server accepts messages containing containers with fields of unknown type, which can cause the server to parse lengthy requests and permit denial of service. Public documents consistently state that this affects Thrif...