CVE-2019-3558

HIGH

Facebook Thrift < 2019.02.18.00 - Improper Exception Handling

Title source: rule
STIX 2.1

Description

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00.

References (4)

Scores

CVSS v3 7.5
EPSS 0.0073
EPSS Percentile 72.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-755 CWE-834
Status published
Products (1)
facebook/thrift < 2019.02.18.00
Published May 06, 2019
Tracked Since Feb 18, 2026