Thrift
CVE-2021-24028
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.
AnalysisAI
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects.02.22.00. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-763. An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects.02.22.00. Affected products include: Facebook Thrift.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Out-of-bounds read vulnerability in Apache Thrift Swift implementation allows remote unauthenticated attackers to trigge
Integer overflow in Apache Thrift's Go TFramedTransport implementation allows remote unauthenticated attackers to crash
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when f
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers o
Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated high
Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated hi
Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated
C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown ty
Apache Thrift Java TSSLTransportFactory fails to verify server hostnames in TLS connections, enabling man-in-the-middle
Integer overflow in Apache Thrift Swift Compact Protocol implementation versions prior to 0.23.0 enables remote unauthen
TLS hostname verification is disabled in Apache Thrift's Java TSSLTransportFactory implementation (versions prior to 0.2
Same weakness CWE-763 – Release of Invalid Pointer or Reference
View allShare
External POC / Exploit Code
Leaving vuln.today