Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown     type. As a result, malicious clients could send short messages which would take a long time for the server     to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to     v2019.03.04.00. (CVE-2019-3564)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown
    type. As a result, malicious clients could send short messages which would take a long time for the server
    to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to
    v2019.03.04.00. (CVE-2019-3564)

ID	Name	Product	Family	Type	Severity
263060	Linux Distros Unpatched Vulnerability : CVE-2019-3564	Nessus	Misc.	Local	high
432051	SCA: security update for github.com/facebook/fbthrift (GHSA-x4rg-4545-4w7w)	Tenable Cloud Security	SCA Checks	Local	high
432051	SCA: security update for github.com/facebook/fbthrift (GHSA-x4rg-4545-4w7w)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
432011	SCA: security update for github.com/facebook/fbthrift (GHSA-x4rg-4545-4w7w)	Tenable Cloud Security	SCA Checks	Local	high
432011	SCA: security update for github.com/facebook/fbthrift (GHSA-x4rg-4545-4w7w)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2019-3564

high

Tenable Plugins

high

high

high

high

high