CVE-2019-11923

2019-12-0416:15:11

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

JSON

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.

CPENameOperatorVersion
mcroutereqrelease-36-cve-fix
mcroutereq0.10.0
mcroutereq0.22.0
mcroutereq0.20.0
mcroutereq0.9.0
mcroutereq0.16.0
mcroutereq0.26.0
mcroutereq0.35.0
mcroutereq0.28.0
mcroutereq0.30.0

Name	Operator	Version
mcrouter	eq	release-36-cve-fix
mcrouter	eq	0.10.0
mcrouter	eq	0.22.0
mcrouter	eq	0.20.0
mcrouter	eq	0.9.0
mcrouter	eq	0.16.0
mcrouter	eq	0.26.0
mcrouter	eq	0.35.0
mcrouter	eq	0.28.0
mcrouter	eq	0.30.0