Denial of Service Vulnerability in Facebook Thrift Servers

CVE-2019-3552

What is CVE-2019-3552?

A vulnerability in the Facebook Thrift servers due to improper error handling when processing messages with unknown field types can lead to denial of service. Malicious clients can exploit this by sending specifically crafted short messages that cause the server to experience delays during parsing. This can overload the server's resources and disrupt its ability to respond, thereby affecting availability. To protect systems, it's critical to update to versions released after v2019.02.18.00.

References