HIGH 7.5 Microsoft
CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.
Microsoft Security Update 2024-Sep: A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.
Affected Products
- azl3 thrift 0.15.0-5 on Azure Linux 3.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-45773
- https://nvd.nist.gov/vuln/detail/CVE-2024-45773
This high severity vulnerability with a CVSS score of 7.5 was published on 2024-09-10 via Microsoft. Affected: azl3 thrift 0.15.0-5 on Azure Linux 3.0.
vulnfeed aggregates 14962 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.