PT-2024-31819 · Facebook · Facebook Thrift

Published 2024-09-27 · Updated 2024-09-30 · CVE-2024-45863

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Facebook Thrift versions v2024.09.09.00 through v2024.09.23.00

Description A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects.

Recommendations For Facebook Thrift versions v2024.09.09.00 through v2024.09.23.00, consider updating to a version newer than v2024.09.23.00 to resolve the issue. As a temporary workaround, consider restricting the parsing of requests with invalid protocols to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2024-45863

Affected Products

Facebook Thrift

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-45863 · Security Note
• https://t.me/cvedetector/6535 · Telegram Post
• https://twitter.com/CVEnew/status/1839670217259254001 · Twitter Post
• https://facebook.com/security/advisories/cve-2024-45863 · Note