CVE-2019-3553: High severity thrift vulnerability
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.02.03.00.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-3553?
CVE-2019-3553 is a vulnerability in C++ Facebook Thrift servers that allows malicious clients to send short messages resulting in a large memory allocation, potentially leading to denial of service.
How does CVE-2019-3553 affect Facebook Thrift?
CVE-2019-3553 affects Facebook Thrift servers by allowing malicious clients to send messages declaring containers of sizes larger than the payload, leading to a denial of service due to large memory allocation.
What is the severity of CVE-2019-3553?
CVE-2019-3553 has a severity rating of 7.5 (high).
How do I fix CVE-2019-3553?
To fix CVE-2019-3553, it is recommended to update to the latest version of Facebook Thrift (version up to exclusive 2020.02.03.00) where the vulnerability has been patched.
Where can I find more information about CVE-2019-3553?
You can find more information about CVE-2019-3553 at the following references: [1] [2] [3].