CVE-2019-11937

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service...

CVE-2019-11937

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service...

CVE-2019-11937

Summary: CVE-2019-11937 affects Mcrouter prior to v0.41.0. A large struct input in the Carbon protocol reader can cause stack exhaustion leading to denial of service. Affected component: Mcrouter, Carbon protocol reader. Cause: Unbounded/large struct input processing in the Carbon protocol reader...

CVE-2019-11923

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service...

CVE-2019-11923

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service...

CVE-2019-11923

CVE-2019-11923 affects Mcrouter prior to v0.41.0. The deprecated ASCII parser could allocate a buffer to a user-specified length with no maximum, enabling resource exhaustion and denial of service. The Red Hat advisory corroborates the same description. Practical impact is DoS via unbounded alloc...

PT-2019-12573

Name of the Vulnerable Software and Affected Versions Mcrouter versions prior to 0.41.0 Description The issue is related to the Carbon protocol reader in Mcrouter, where a large struct input could cause stack exhaustion, leading to denial of service. Recommendations For versions prior to 0.41.0,...

CVE-2019-11923: Allocation of Resources Without Limits or Throttling

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service...

PT-2019-12559

Name of the Vulnerable Software and Affected Versions Mcrouter versions prior to 0.41.0 Description The issue arises from the deprecated ASCII parser allocating a buffer based on a user-specified length without enforcing a maximum length, leading to potential resource exhaustion or denial of...

CVE-2019-11937: Uncontrolled Recursion

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service...

Facebook Mcrouter Multiple Denial of Service Vulnerabilities

Description Facebook Mcrouter is prone to multiple denial of service vulnerabilities. An attacker can exploit these issues to cause a denial of service condition. Technologies Affected Facebook Mcrouter 0.1.0 Facebook Mcrouter 0.10.0 Facebook Mcrouter 0.20.0 Facebook Mcrouter 0.30.0 Facebook...