UBUNTU-CVE-2019-3559

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thri...

CVE-2019-3552

C++ Facebook Thrift servers using cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects...

UBUNTU-CVE-2019-3564

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

UBUNTU-CVE-2019-3552

C++ Facebook Thrift servers using cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects...

CVE-2019-3565

Legacy C++ Facebook Thrift servers using cpp instead of cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service...

CVE-2019-3552

C++ Facebook Thrift servers using cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects...

CVE-2019-3559

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thri...

CVE-2019-3565

Summary: CVE-2019-3565 affects legacy Facebook Thrift servers (cpp, not cpp2). The root cause is that servers would not error when receiving messages containing containers of fields with unknown types, enabling malicious clients to send short messages that force long parsing times and cause denia...

CVE-2019-3558

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook...

CVE-2019-3552

CVE-2019-3552 affects Facebook Thrift servers (cpp2). The issue occurs when the server accepts messages containing containers with fields of unknown type, which can cause the server to parse lengthy requests and permit denial of service. Public documents consistently state that this affects Thrif...

CVE-2019-3564

CVE-2019-3564 affects Go Facebook Thrift servers where messages containing containers with fields of unknown type are not rejected. This can allow a malicious client to send short messages that take long to parse, enabling a denial-of-service condition. Affected product: Facebook Thrift (Go imple...

CVE-2019-3564

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

CVE-2019-3559

The CVE-2019-3559 issue affects Facebook Thrift servers prior to v2019.02.18.00. The root cause is that Java Facebook Thrift servers would not error when receiving messages whose containers contain fields of unknown type, allowing malicious clients to craft short messages that take a long time to...

CVE-2019-3558

CVE-2019-3558 affects the Facebook Thrift server implementation. The issue arises when Python Facebook Thrift servers receive messages containing containers of fields of unknown type; such messages are not error-checked, allowing malicious clients to send short messages that the server must parse...

CVE-2019-3565

Legacy C++ Facebook Thrift servers using cpp instead of cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service...

CVE-2019-3558

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook...

CVE-2019-3564

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

CVE-2019-3552

C++ Facebook Thrift servers using cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects...

CVE-2019-3559

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thri...

Facebook Thrift Denial of Service Vulnerability

Facebook Thrift is a branch of Apache Thrift from Facebook Inc. is a serialization and RPC framework for service communication. A security vulnerability exists in versions prior to Facebook Thrift 2019.02.18.00. An attacker can exploit the vulnerability by sending a short message via a malicious...