CVE-2019-11937

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service...

CVE-2019-11937

Summary: CVE-2019-11937 affects Mcrouter prior to v0.41.0. A large struct input in the Carbon protocol reader can cause stack exhaustion leading to denial of service. Affected component: Mcrouter, Carbon protocol reader. Cause: Unbounded/large struct input processing in the Carbon protocol reader...

CVE-2019-11923

CVE-2019-11923 affects Mcrouter prior to v0.41.0. The deprecated ASCII parser could allocate a buffer to a user-specified length with no maximum, enabling resource exhaustion and denial of service. The Red Hat advisory corroborates the same description. Practical impact is DoS via unbounded alloc...

CVE-2019-11923

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service...

Facebook Mcrouter Multiple Denial of Service Vulnerabilities

Description Facebook Mcrouter is prone to multiple denial of service vulnerabilities. An attacker can exploit these issues to cause a denial of service condition. Technologies Affected Facebook Mcrouter 0.1.0 Facebook Mcrouter 0.10.0 Facebook Mcrouter 0.20.0 Facebook Mcrouter 0.30.0 Facebook...