Beveiligingsadvies

CVE-2019-11939

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-18 00:40:12
Laatst bijgewerkt 2024-08-04 23:10:29
Toegewezen door facebook
CVSS-score geen score
Status PUBLISHED

Beschrijving

Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.