TH
Product
Thrift
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 1Low 0
Watch
Add Thrift to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45773 | 7.5 | Sep 27 | A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects Affected: 2024.09.09.00 before 2024.09.23.00 |
| CVE-2019-11939 | 7.5 | Mar 18 | Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload Affected: before 2020.03.16.00 |
| CVE-2019-3553 | 7.5 | Mar 10 | C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload Affected: before 2020.02.03.00 |
| CVE-2019-11938 | 7.5 | Mar 10 | Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload Affected: before 2019.12.09.00 |
| CVE-2019-3565 | 7.5 | May 6 | Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type Affected: before 2019.05.06.00 |
| CVE-2019-3564 | 7.5 | May 6 | Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type Affected: before 2019.03.04.00 |
| CVE-2019-3559 | 7.5 | May 6 | Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type Affected: before 2019.02.18.00 |
| CVE-2019-3558 | 7.5 | May 6 | Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type Affected: before 2019.02.18.00 |
| CVE-2019-3552 | 7.5 | May 6 | C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type Affected: before 2019.02.18.00 |
Showing 9