Uploaded image for project: 'Thrift'
  1. Thrift
  2. THRIFT-5779

Thrift server getting killed for incomplete requests

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 0.12.0
    • None
    • C++ - Library
    • None

    Description

      The thrift server is getting killed when using security port scan tools in the hosts running the thrift server. These tools try to connect to the open ports by sending requests to the ports, and the error can happen when accept syscall call, waiting for an incoming connection, or receiving a connection that terminates before the accept process completes, hence killing the thrift server. This can cause potential DoS (Denial of service) attacks on the applications running the thrift server, causing them to become unresponsive. Sometimes, even just running the netcat (nc -zvvvw2 <hostname> <thrift server port>) on the port remote can kill the entire thrift server, making it unresponsive. 

      Attachments

        Issue Links

          Activity

            People

              anshulmgupta Anshul Mohan Gupta
              anshulmgupta Anshul Mohan Gupta
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m