CVE-2024-45773: Use After Free
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 0.15.0-5 - Upgrade
Upgrade
facebook/thriftto a version that resolves this vulnerability.Fixed in v2024.09.09.00
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45773?
CVE-2024-45773 is considered to be a high-severity vulnerability due to its potential to cause crashes and enable code execution.
How do I fix CVE-2024-45773?
To mitigate CVE-2024-45773, upgrade to Facebook Thrift version 2024.09.09.00 or later.
What causes the CVE-2024-45773 vulnerability?
CVE-2024-45773 is caused by a use-after-free flaw in the handling of upgradeToRocket requests.
Which software is affected by CVE-2024-45773?
CVE-2024-45773 affects Facebook Thrift versions prior to 2024.09.09.00.
What are the potential consequences of exploiting CVE-2024-45773?
Exploitation of CVE-2024-45773 could lead to application crashes or potentially allow an attacker to execute arbitrary code.