tocsin

CVE-2019-11939

2 advisories.

Go/github.com/facebook/fbthrift CVE-2019-11939: high 7.5, EPSS 1.56%

Golang Facebook Thrift servers vulnerable to denial of service

Action: Upgrade github.com/facebook/fbthrift to 0.31.1-0.20200311080807-483ed864d69f or later.

go get github.com/facebook/fbthrift@v0.31.1-0.20200311080807-483ed864d69f

Affected

introducedfixedlast affected
00.31.1-0.20200311080807-483ed864d69f-

Fixed versions

0.31.1-0.20200311080807-483ed864d69f

Sources

CVE-2019-11939 · published · modified · JSON

Go/github.com/facebook/fbthrift CVE-2019-11939: unknown, EPSS 1.56%

Denial of service via malicious message size declaration in github.com/facebook/fbthrift

Action: Upgrade github.com/facebook/fbthrift to 0.31.1-0.20200311080807-483ed864d69f or later.

go get github.com/facebook/fbthrift@v0.31.1-0.20200311080807-483ed864d69f

Affected

introducedfixedlast affected
00.31.1-0.20200311080807-483ed864d69f-

Fixed versions

0.31.1-0.20200311080807-483ed864d69f

Sources

CVE-2019-11939 · published · modified · JSON