CVE-2019-11923

Publication date

2019-12-04 16:00:21

Family

facebook

State

PUBLISHED

Description

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.