CVE-2019-11937

2019-12-0416:15:11

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

JSON

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service.

CPENameOperatorVersion
mcroutereqrelease-36-cve-fix
mcroutereq0.10.0
mcroutereq0.22.0
mcroutereq0.20.0
mcroutereq0.9.0
mcroutereq0.16.0
mcroutereq0.26.0
mcroutereq0.35.0
mcroutereq0.28.0
mcroutereq0.30.0

Name	Operator	Version
mcrouter	eq	release-36-cve-fix
mcrouter	eq	0.10.0
mcrouter	eq	0.22.0
mcrouter	eq	0.20.0
mcrouter	eq	0.9.0
mcrouter	eq	0.16.0
mcrouter	eq	0.26.0
mcrouter	eq	0.35.0
mcrouter	eq	0.28.0
mcrouter	eq	0.30.0