GCVE - cpe:2.3:a:facebook:facebook_thrift:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:facebook_thrift:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Facebook (`c319c35a-3469-5baa-b3bd-8582d1206a92`)
Product	Facebook Thrift (`a8ab9cf7-f6e8-54f1-aa7e-5b00370909da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-45863`	vulnerable	2026-06-08 06:48:09.834375	Details available A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00. Published: 2024-09-27T13:50:29.254Z Updated: 2024-09-27T14:29:01.158Z Open on db.gcve.eu Reference links https://www.facebook.com/security/advisories/cve-2024-45863	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45773`	vulnerable	2026-06-08 06:48:09.020563	Details available A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00. Published: 2024-09-27T13:49:54.031Z Updated: 2024-09-27T14:30:23.721Z Open on db.gcve.eu Reference links https://www.facebook.com/security/advisories/cve-2024-45773	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24028`	vulnerable	2026-06-08 05:30:03.505124	Details available An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00. Published: 2021-04-13T23:20:13.000Z Updated: 2024-08-03T19:21:17.258Z Open on db.gcve.eu Reference links https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339 https://www.facebook.com/security/advisories/cve-2021-24028	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3565`	vulnerable	2026-06-08 05:13:55.055533	Details available Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00. Published: 2019-05-06T15:15:02.000Z Updated: 2024-08-04T19:12:09.598Z Open on db.gcve.eu Reference links https://github.com/facebook/fbthrift/commit/01686e15ec77ccb4d49a77d5bce3a01601e54d64 https://www.facebook.com/security/advisories/cve-2019-3565 http://www.securityfocus.com/bid/108280 https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3564`	vulnerable	2026-06-08 05:13:55.054865	Details available Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00. Published: 2019-05-06T15:15:02.000Z Updated: 2024-08-04T19:12:09.508Z Open on db.gcve.eu Reference links https://github.com/facebook/fbthrift/commit/c461c1bd1a3e130b181aa9c854da3030cd4b5156 https://www.facebook.com/security/advisories/cve-2019-3564 https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3559`	vulnerable	2026-06-08 05:13:55.050550	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3558`	vulnerable	2026-06-08 05:13:55.050058	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3553`	not_vulnerable	2026-06-08 05:13:55.043067	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3552`	vulnerable	2026-06-08 05:13:55.041830	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11939`	not_vulnerable	2026-06-08 05:12:38.325133	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11938`	not_vulnerable	2026-06-08 05:12:38.324059	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.