Thrift
CVE-2019-3565
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00.
AnalysisAI
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-834. Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service.05.06.00. Affected products include: Facebook Thrift.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code e
Out-of-bounds read vulnerability in Apache Thrift Swift implementation allows remote unauthenticated attackers to trigge
Integer overflow in Apache Thrift's Go TFramedTransport implementation allows remote unauthenticated attackers to crash
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when f
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with
Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated high
Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated hi
Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated
C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown ty
Apache Thrift Java TSSLTransportFactory fails to verify server hostnames in TLS connections, enabling man-in-the-middle
Integer overflow in Apache Thrift Swift Compact Protocol implementation versions prior to 0.23.0 enables remote unauthen
TLS hostname verification is disabled in Apache Thrift's Java TSSLTransportFactory implementation (versions prior to 0.2
Same weakness CWE-834 – Excessive Iteration
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today