CVE-2019-11923

HIGH 7.5CVE-2019-11923 · Published 04/12/2019 · updated 17/06/2026

In short

CVE-2019-11923 is a HIGH (CVSS 7.5) vulnerability affecting mcrouter (facebook).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.4% of all vulnerabilities.
Fix: update to 0.41.0 or later.

Package	Affected versions	Patched versions
mcrouter facebook	`< 0.41.0`	`0.41.0`

Description

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.

References

facebook/mcrouter commit 98ce662 · Patch
facebook/mcrouter release v0.41.0-release · Release Notes
facebook.com/security/advisories/cve-2019-11923 · Vendor Advisory

More vulnerabilities in mcrouter

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free