« Volver al listado

CVE-2024-45863

Estado: AplazadaMedia (5.3)—

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Facebook — ThriftAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-45863",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-45863",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-27T14:28:57.801474Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "cve-assign@fb.com",
      "affectedData": [
        {
          "vendor": "Facebook",
          "product": "Facebook Thrift",
          "versions": [
            {
              "status": "affected",
              "version": "v2024.09.09.00",
              "lessThan": "v2024.09.23.00",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:facebook:thrift:*:*:*:*:*:*:*:*"
          ],
          "vendor": "facebook",
          "product": "thrift",
          "versions": [
            {
              "status": "affected",
              "version": "2024.09.09.00",
              "lessThan": "2024.09.23.00",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-09-27T14:15:04.567",
  "references": [
    {
      "url": "https://www.facebook.com/security/advisories/cve-2024-45863",
      "source": "cve-assign@fb.com"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de desreferencia nula que implica el análisis de solicitudes que especifican protocolos no válidos puede provocar que la aplicación se bloquee o potencialmente tener otros efectos no deseados. Este problema afecta a Facebook Thrift desde la versión v2024.09.09.00 hasta la v2024.09.23.00."
    }
  ],
  "lastModified": "2026-06-17T07:54:58.890",
  "sourceIdentifier": "cve-assign@fb.com"
}