In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: facebook
Published: 2019-12-04T16:00:21
Updated: 2024-08-04T23:10:29.637Z
Reserved: 2019-05-13T00:00:00
Link: CVE-2019-11923
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-12-04T16:15:11.637
Modified: 2020-08-24T17:37:01.140
Link: CVE-2019-11923
Redhat
No data.