Not rated
CVE-2019-11923 In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no…
Description
In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mcrouter 0.41 | earliest → 0.41.0 | 0.41.0 |