CVE-2024-45863
Last modified
CVE-2024-45863 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-45863?
How severe is CVE-2024-45863?
How do I fix CVE-2024-45863?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-45856A cross-site scripting (XSS) vulnerability exists in all ver…5.4
- CVE-2024-45857Deserialization of untrusted data can occur in versions 2.4.…7.8
- CVE-2024-45858An arbitrary code execution vulnerability exists in versions…7.8
- CVE-2024-4586A vulnerability has been found in DedeCMS 5.7 and classified…4.3
- CVE-2024-45861Kastle Systems firmware prior to May 1, 2024, contained a ha…7.5
- CVE-2024-45862Kastle Systems firmware prior to May 1, 2024, stored machine…7.5
- CVE-2024-4587A vulnerability was found in DedeCMS 5.7 and classified as p…4.3
- CVE-2024-45870Bandisoft BandiView 7.05 is vulnerable to Incorrect Access C…6.5
- CVE-2024-45871Bandisoft BandiView 7.05 is Incorrect Access Control via sub…6.3
- CVE-2024-45872Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow vi…6.3
- CVE-2024-45873A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 all…9.8
- CVE-2024-45874A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows…9.8
Are you affected by CVE-2024-45863?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST