CVE-2024-45863

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.facebook.com/security/advisories/cve-2024-45863

Configurations

No configuration.

History

No history.

Information

Published : 2024-09-27 14:15

Updated : 2026-06-17 07:54

NVD link : CVE-2024-45863

Mitre link : CVE-2024-45863

CVE.ORG link : CVE-2024-45863

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2024-45863", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-45863", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-27T14:28:57.801474Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "affected": [{"source": "cve-assign@fb.com", "affectedData": [{"vendor": "Facebook", "product": "Facebook Thrift", "versions": [{"status": "affected", "version": "v2024.09.09.00", "lessThan": "v2024.09.23.00", "versionType": "semver"}], "defaultStatus": "unaffected"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:a:facebook:thrift:*:*:*:*:*:*:*:*"], "vendor": "facebook", "product": "thrift", "versions": [{"status": "affected", "version": "2024.09.09.00", "lessThan": "2024.09.23.00", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2024-09-27T14:15:04.567", "references": [{"url": "https://www.facebook.com/security/advisories/cve-2024-45863", "source": "cve-assign@fb.com"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00."}, {"lang": "es", "value": "Una vulnerabilidad de desreferencia nula que implica el an\u00e1lisis de solicitudes que especifican protocolos no v\u00e1lidos puede provocar que la aplicaci\u00f3n se bloquee o potencialmente tener otros efectos no deseados. Este problema afecta a Facebook Thrift desde la versi\u00f3n v2024.09.09.00 hasta la v2024.09.23.00."}], "lastModified": "2026-06-17T07:54:58.890", "sourceIdentifier": "cve-assign@fb.com"}